make-local-route

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt tells the agent to retrieve and include sensitive credentials (embed tokens like atok_*, and bearer tokens) verbatim in generated URLs and curl commands, which requires the LLM to output secrets directly and thus poses a high exfiltration risk.