orchestrator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to report Gatekeeper artifacts (gatekeeper key and webhook URL/token) if available, which requires the model to include secret hook tokens/URLs verbatim in its output — creating an exfiltration risk even though CI examples use env placeholders.