gget

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs users to provide API keys and passwords as command-line arguments or function parameters (e.g., --api_key your_key_here, --password xxx, gget.gpt(..., api_key="your_key_here")), which requires the LLM to include secret values verbatim in commands/code and thus presents a direct exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The gget skill explicitly fetches and ingests live data from public third‑party databases (e.g., Ensembl/UniProt/NCBI via gget.search, gget.info, gget.seq; ARCHS4 and cellxgene; cBioPortal/cosmic/Enrichr) and the documented workflows show the agent reading those results and using them to drive subsequent tool calls and decisions (see Workflow 1, 3, and module docs), so untrusted external content can materially influence actions.