offboard

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.95). The prompt explicitly tells the agent to "grep for secrets" and "scan the local project directory" and to "report what you find," which requires reading and potentially outputting secret values verbatim (API keys, tokens, passwords), creating an exfiltration risk.