retro

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs running printenv to emit CLAUDE_CODE_SESSION_ID and to use that session id verbatim in shell commands/paths (e.g., ls "$HOME/.../${CLAUDE_CODE_SESSION_ID}.jsonl"), which requires the LLM/agent to read and handle a secret-like session token directly and potentially output it.