bmad-os-review-prompt

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires quoting "exact quote or location" and producing concrete rewritten examples from the input prompt, which would force the agent to verbatim echo any embedded API keys, tokens, or passwords present in prompts and thus enables secret exfiltration.