orca-config-origin

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires embedding CodeOrigins code snippets, file lines, and sensitive-data artefacts (files/images) in the report — which can force inclusion of secret values verbatim (e.g., API keys or credentials found in IaC or images), creating an exfiltration risk.