soc-analyst

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read environment files (e.g., .env, config files) and "show evidence" and "before/after" diffs of vulnerable code, which can force secrets (API keys, tokens, passwords) to be included verbatim in outputs, creating an exfiltration risk.