qa

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes commands that pass secrets as literal CLI arguments (e.g., --access-token=TOKEN / explicit-token stdio path), which requires the agent to insert secret values verbatim into generated commands—an exfiltration risk.