owasp-top-10-web

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires extracting and reporting code/config snippets as "Evidence" (including patterns for hard-coded passwords, API keys, tokens, and .env files), which would force the LLM to reproduce secret literals verbatim if they exist in the reviewed files.