duel-agents-routing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt contains literal API-key-looking strings and shows commands/config snippets that place keys verbatim into .env and JSON (e.g., export DUEL_API_KEY=duel_abc12345_...), which encourages embedding/exposing secrets rather than keeping them hidden—so the LLM may be asked to handle or reproduce secret values directly.