awsclaw-sts

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The STSTool schema and examples require the agent to emit sensitive values (e.g., WebIdentityToken, SAMLAssertion, MFA TokenCode, temporary credentials or access keys) as literal parameter values in the JSON command, forcing the LLM to include secrets verbatim in its output.