reference

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The document contains examples that embed plaintext passwords in commands and code (e.g., qpdf --password=secret123 --decrypt ... and reader.decrypt("password")), which instructs including secrets verbatim in outputs/commands and therefore creates an exfiltration risk.