geoserver-rest-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt embeds explicit credentials (username "admin" and password "geoserver") and shows curl commands with -u admin:geoserver and Authorization headers, which require the agent to output those secret values verbatim (high exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's API documentation explicitly includes an endpoint to load data from arbitrary remote URLs ("通过 URL 加载数据 — PUT /rest/workspaces/{ws}/datastores/{ds}/url.{ext}" in the Data Stores section), meaning the agent can ingest untrusted third‑party content from the open web that could influence subsequent operations.