flow-coordinator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt constructs commands and prompt payloads by directly resolving and embedding previous node outputs and contextRefs into slash commands and Bash calls (resolveContextRefs / buildCommandPrompt → ccw cli -p "..."), so any secret values present in outputs would be included verbatim and exfiltrated.