grammarly-core-workflow-b

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The examples accept a "token" parameter and interpolate it directly into Authorization headers (Bearer token) for API requests, which would require the LLM to include secret values verbatim in generated requests/commands and thus creates an exfiltration risk.