opfor-run

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to use Bearer tokens and other API keys (from notes, env vars, or by asking the user on 401/403) and to embed them in HTTP requests and telemetry fetch calls, which means the LLM must receive and handle secret values and may include them verbatim in requests/output/logs.