surrealdb

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt embeds plaintext credentials (e.g., repeated --user/--pass and SURREAL_PASS/SURREAL_USER values like "root") and shows examples of passing them directly on the command line, which requires the LLM to emit secrets verbatim and therefore poses a high exfiltration risk.