azure-mgmt-apimanagement-py

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes code that embeds a literal secret value when creating a Named Value ("secret-key-value") and prints subscription.primary_key, which encourages handling and echoing secrets verbatim (high exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill includes an "Import API from URL" example that uses ContentFormat.OPENAPI_LINK with a value like "https://petstore.swagger.io/v2/swagger.json", meaning the agent can fetch and parse arbitrary public OpenAPI documents (third‑party, untrusted content) as part of its workflow.