pp-dreaming

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs users/agents to copy a bearer token from browser localStorage and run a CLI command that embeds that token as a command argument (dreaming auth set-token <token>), which requires the LLM/agent to handle or emit the secret verbatim (and also references exchanging email/password for a token via sign-in).