iggy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill contains multiple examples and templates that embed plaintext credentials and show commands/connection strings with username/password or env vars (e.g., IGGY_ROOT_PASSWORD, iggy:iggy, --password), which would require an LLM to output secret values verbatim when generating commands/configs — an exfiltration risk.