harness-executor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). Because the verifier is explicitly required to record "request/response evidence" (and reads environment/env_vars to start services), the agent may be forced to capture and emit HTTP request/response contents (headers, cookies, auth tokens or env-derived credentials) verbatim in verification-report.json and other outputs, creating an exfiltration risk.