dream

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill reads raw conversation JSONL and prints/inserts message content into Sibyl (a networked store) without instructing redaction, so any API keys, tokens, or passwords present in conversations could be copied verbatim and exfiltrated.