distill-session

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly requires pasting verbatim prompts and full model outputs into saved files (and re-emitting them during extraction), so if those contain API keys, tokens, or passwords the agent must handle and output them exactly, creating a high exfiltration risk.