bm-share

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly reads a note's full content and then writes that content verbatim to a team project (via write_note), so any secrets in the note would be included in outputs/requests and thus exfiltrated.