baoyu-infographic

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly mandates preserving all source data verbatim and writing it into generated files and prompts (including prompts sent to image-generation skills), so any user-supplied secrets or API keys would be reproduced and potentially forwarded, creating a high exfiltration risk.