plugin-settings

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt instructs agents/commands to ask users for configuration values and then create .claude/*.local.md files by writing those values into YAML frontmatter, which would require the model to output user-provided secrets verbatim into file contents (high exfiltration risk).