performing-security-headers-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The workflow explicitly fetches Set-Cookie headers and includes a shell snippet that extracts and echoes cookie name=value (session tokens) verbatim, which requires the agent to read and output secret cookie values.