bat-story-eval

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the evaluator to capture the Home Assistant token/URL from stderr and then embed that token verbatim into subsequent CLI commands (e.g., --ha-token TOKEN), which requires the LLM to handle and output secret values directly.