neo-team-kiro

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The orchestrator explicitly reads project files and injects "relevant sections" and prior agent outputs into subagent prompts and final assembled output, so any secrets present in those files or outputs would be routed through and potentially reproduced verbatim by the LLM, creating an exfiltration risk.