memos-skill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs asking for and embedding user access tokens verbatim (e.g., writing "access_token": "abc123" into config.json and inserting it into Authorization headers), which requires the LLM to handle and output secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md instructs the agent to fetch and read user-generated content from a configured memos instance (the instance_url in config.json) using endpoints like GET /api/v1/memos and GET /api/v1/memos/{memo} (including comments/attachments), so untrusted third‑party memos could contain instructions that materially influence subsequent actions such as searches, PATCH updates, or deletes.