azure-test-plans

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The sample Python code shows assigning a PAT and inserting it directly into the Authorization header, which instructs the agent to handle and emit secret values verbatim instead of using environment variables or secure auth flows.