CtrlK
BlogDocsLog inGet started
Tessl Logo

giuseppe-trisciuoglio/developer-kit

Comprehensive developer toolkit providing reusable skills for Java/Spring Boot, TypeScript/NestJS/React/Next.js, Python, PHP, AWS CloudFormation, AI/RAG, DevOps, and more.

69

Quality

87%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Risky

Do not use without reviewing

Overview
Quality
Evals
Security
Files

Security

2 findings — 1 high severity, 1 medium severity. You should review these findings carefully before considering using this skill.

High

W007: Insecure credential handling detected in skill instructions

What this means

The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.

Why it was flagged

Insecure credential handling detected (high risk: 0.80). The prompt includes explicit code examples that embed API keys directly (e.g., .withApiKey("YOUR_API_KEY") and apiKey("YOUR_API_KEY")), which instructs an agent to place secret values verbatim into generated code and thus encourages insecure handling even if shown as placeholders.

Report incorrect finding
Medium

W011: Third-party content exposure detected (indirect prompt injection risk)

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

Third-party content exposure detected (high risk: 0.90). The skill exposes the agent to arbitrary, untrusted user-generated content via the RAG ingestion endpoints (e.g., RagController POST /api/rag/ingest and SearchController POST /api/search/document in the SKILL.md/references/examples.md), which are stored in Qdrant and then retrieved by the EmbeddingStoreContentRetriever and used by assistant.chat—allowing ingested third-party documents to directly influence LLM behavior.

Audited
Security analysis
Snyk