checklist-ledger

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill tells the agent to ask the user for their admin token and to run commands that embed that token verbatim (e.g., checklist login --api-key <token>) and also to read/print the user's config file (via cat), which forces the LLM to handle secret values directly.