ai-agent-governance

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's code explicitly generates plaintext API keys and returns them (create_agent_credential returns "api_key": api_key) and also logs/traces inputs which could capture secrets, so it requires emitting secret values verbatim and poses an exfiltration risk.