here-now

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to accept user-provided sign-in codes and tokens and to use them verbatim in curl requests / Authorization headers or echo them into credential files, which requires the LLM to handle and potentially output secret values directly.