hono-middleware

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes multiple code examples that embed literal secrets (e.g., bearerAuth({ token: 'my-secret-token' }), basicAuth password: 'secret', jwt secret: 'my-jwt-secret'), which requires or encourages the agent to output secret values verbatim and is therefore high-risk.