phase-4-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes concrete examples that embed plaintext credentials in outputs (e.g., a curl test with "password":"pass123") and instructs emitting Authorization headers with bearer tokens, which requires the agent to output secrets verbatim.