alibabacloud-executing-plans

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to Read local .tf files and inline their exact contents into MCP command strings via the --code parameter, which forces the LLM to include file contents verbatim in its output (and those files may contain secrets), creating an exfiltration risk.