workflow-implement-phases

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly reads and embeds phase result/artifact files into Task() prompts (dep_results and artifacts) and its dependency analysis mentions secrets/env vars, so the agent can be required to include secret values verbatim in prompts/outputs, creating an exfiltration risk.