prelude

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes and encourages patterns that embed secrets verbatim in commands (e.g., prelude auth login -p "password", partner attach ... --secret "client_secret", service tokens in create-endpoint), which requires the LLM to handle/output secret values directly and poses exfiltration risk.