cross-domain-borrow

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to replace bracketed placeholders with the user's "real information" and to output the original text verbatim, so any secrets a user pastes into those placeholders would be echoed back by the LLM.