performing-penetration-testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The orchestrator routes and persists outputs from skills that explicitly scan for hardcoded secrets and exposed secret files (e.g., API keys, .env contents), which implies the LLM/process will handle and may need to emit secret values verbatim in the findings.