winapp-ui-automation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The CLI examples and the winapp ui set-value usage show passing arbitrary text values directly as command-line arguments (e.g., winapp ui set-value ""), which means an agent would likely need to emit secret strings verbatim into its output if asked to fill password/API-token fields, creating an exfiltration risk.