bmad-distillator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill mandates lossless preservation of all facts from source documents and, in fallback modes, instructs the agent to read and output distilled content (including named entities and exact details), so any API keys/passwords present in sources would be reproduced verbatim in the distillate and outputs.