ss-coding

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly instructs the orchestrator to read and paste file contents and other context into subagent prompts (e.g., "read and paste it in", "paste the full task text" and include file paths), which can force the LLM to include secret values verbatim if those files or contexts contain credentials, creating an exfiltration risk.