postman-test-script-generator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to output the full updated Postman collection JSON when given an existing collection, which will verbatim include any Authorization headers, environment variable values, or tokens present in that collection, creating an exfiltration risk.