import-solution

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill explicitly instructs capturing an access token (via az account get-access-token) and collecting user secret env-var values, then embedding those secrets verbatim into CLI invocations and HTTP request bodies/script arguments (e.g., --token "{token}", POST bodies for environmentvariablevalues), which requires the LLM/agent to handle and output secret values directly.