speed

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires extracting text from previous responses or user-provided arguments and inserting it verbatim (escaped) into an HTML script string, so any secrets present in that text would be included in the agent's output and thereby risk exfiltration.