express-security-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill inspects source for literal secrets (e.g., session secret literals) and would typically report offending code/values, which requires the model to read and potentially output secret values verbatim, creating an exfiltration risk.