quiz-me

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read saved card files and "reveal the saved answer" verbatim and to read/append notes/cards, so any secret strings stored in those files would be output or copied by the LLM directly, creating an exfiltration risk.