skill-scanner

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt instructs the agent to read all script files and include "Evidence: [code snippet]" in findings and to parse scanner JSON (which may contain detected tokens), but gives no guidance to redact secrets—so the agent will likely need to reproduce secret values verbatim when they appear.