reflect-appworld-failure

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill asks the model to analyze provided failed code/error snippets and produce concrete, working code examples (including auth calls like login/access_token) but gives no guidance to avoid copying or redacting secrets from the input, so the model could output verbatim credentials present in the failure data.