sast-report

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). Because it requires preserving Proof and Dynamic Test sections verbatim (including curl commands or code paths), any embedded API keys, tokens, or passwords in those findings would be reproduced by the LLM, creating an exfiltration risk.