sec-owasp-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt asks the agent to scan code for "exposed secrets" and produce detailed reports with specific code snippets from the targets, which can require including API keys, tokens, or passwords verbatim in the output (an exfiltration risk).