analyzing-powershell-empire-artifacts

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs decoding Base64 payloads and including decoded payloads/IOCs in a JSON report, which would require the LLM to surface any embedded secrets or credentials verbatim if present in logs.