dzen

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the user to copy browser cookies and the x-csrf-token into a workspace config file (and those exact values must be sent in requests), which requires the agent to handle and potentially output secret values verbatim, creating a high exfiltration risk.