axiom-scan-security-privacy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly searches for hardcoded API keys (including real token prefixes) and requires reading matched code context but gives no instruction to redact sensitive values, so the agent may end up exposing secrets verbatim in its findings or example snippets.