secure-by-default

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs scanning for secret patterns and to include exact file/line evidence, which would require the agent to reproduce any discovered secret strings verbatim in its output, creating an exfiltration risk.