iblai-security-owasp-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs searching for hardcoded secrets and to include "Vulnerable Code" snippets in findings, which would require reproducing secret values verbatim in the report and thus risks secret exfiltration.