trueflow

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill mandates verbatim copying and passing of upstream artifact and stage-file contents (and final table cells) without redaction, so if those artifacts contain API keys/passwords/cookies the LLM is required to reproduce them in its outputs, enabling secret exfiltration.