static-application-security-testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly directs the agent to capture and include vulnerable code snippets (including hardcoded secrets like DB_PASSWORD = "SuperSecret123!") in reports, which requires the LLM to read and output secret values verbatim, posing an exfiltration risk.