server-connection-dotnet

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples that hardcode credentials (e.g., Password = "password") and show passing a password on the command line (sdk-doctor -p password), which are patterns that would require an LLM to embed secret values verbatim and thus pose an exfiltration risk.