validate

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs running commands that print environment variables and .env file contents (e.g., env | grep ..., cat backend/.env | grep ...) and asks the agent to execute and report results, which can cause API keys/tokens to be output verbatim—creating exfiltration risk.