security-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires parsing the scanner's JSON and embedding each finding's "code" field and details verbatim into the report, which would cause any hardcoded secrets or tokens discovered in the scan to be output by the LLM (exfiltration risk).