pp-learn-loop-example

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly describes storing and substituting live tokens (e.g., auth set-token YOUR_TOKEN_HERE and Playbook.slots_resolved containing "token") and instructs the agent to replay steps with those substitutions, which requires the LLM to include secret values verbatim in generated commands/outputs, creating an exfiltration risk.