winui-session-report

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill runs and reads an unredacted session-report that explicitly contains verbatim prompts, environment values, and any secrets pasted into the session, and instructs the agent to summarize/report those details—creating a clear path for secrets to be exposed in LLM output.