base

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly tells the agent to ask for and read a user's centralized access keys file, parse and validate keys, and "create project .env with found keys," which requires handling and writing secret values verbatim (high exfiltration risk).