ask-hr

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's required output explicitly asks the agent to reproduce "exact quote" and provide a full rewrite of the user's content, which would force the model to echo any API keys, tokens, or passwords contained in the input verbatim, creating an exfiltration risk.