claude-command-authoring

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly permits embedding file contents (e.g., @path/to/file) and including shell command output (via !...) in command context, which can cause the model to read and reproduce secrets verbatim if those files or commands expose credentials.