linear

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to take headers (and signed upload URLs) returned by the fileUpload GraphQL call and include the exact headers/URL in a curl PUT, which requires the LLM to handle and emit those authorization values verbatim.