webhook-dx-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly asks the agent (and human) to capture and store full delivery payloads including all request headers and bodies in the audit.hitl_evidence.delivery_payload_capture and to populate the YAML with those values (e.g., signature headers, tokens, cookies), which requires handling and embedding secrets verbatim in output.