research

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires the agent to read and report file contents and code lines (with file:line references) but gives no instruction to redact or avoid printing secrets, so any hardcoded API keys, tokens, or passwords found in the codebase could be output verbatim.