teams-app-developer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to ask users for real secret values (e.g., AZURE_OPENAI_API_KEY) and to resolve/insert missing config values into project files, which requires the LLM to receive and potentially emit those secrets verbatim into configs or commands.