doc-smith-publish

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt instructs the LLM to extract user-provided credentials from the message and pass them directly as a command-line argument to a script (--token "<credential>"), which exposes the secret value through the agent's execution context and output.