bf-to-agents-sdk-dotnet-migration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the migration to "carry forward" existing auth values (e.g., MicrosoftAppPassword/ClientSecret, MicrosoftAppId, TenantId) into newly generated appsettings.json entries, which requires the LLM to read and emit secret values verbatim into output files — an exfiltration risk.