triage-validation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt requires "copy-pasteable" exact HTTP requests (method, URL, headers, body) and explicit PoC curl-style steps for reproduction, which commonly forces embedding Authorization headers, session cookies, or API tokens verbatim, so the LLM may be required to output secrets directly.