iac-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires capturing scanner findings "verbatim" and quoting the offending directive (file:line), plus explicitly sweeping for and flagging literal secrets/tokens/keys, which forces the agent to include secret values verbatim in its output (high exfiltration risk).