halo-cli-auth

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's examples and rules show passing bearer tokens and passwords directly via CLI flags (e.g., --token, --password) and require non-interactive login parameters, which would force an agent to include secret values verbatim in generated commands—an exfiltration risk.