forge

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly reads and copies session transcripts and prints queued files (e.g., cat .agents/ao/pending.jsonl / copying transcript content to markdown), so any secrets present in conversations would be captured and output verbatim, creating a high exfiltration risk.