agentic-top-10

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the assessor to grep for API keys, tokens, passwords and to document "evidence" (file paths and code snippets) without requiring redaction, which would require the LLM to read and potentially include secret values verbatim in its output.