extracting-iocs-from-malware-samples

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes code and instructions that embed a VirusTotal API key directly into requests (VT_API_KEY = "your_api_key" and headers={"x-apikey": VT_API_KEY}), which would require the LLM to accept or emit the secret value verbatim to perform the validation—an insecure secret-handling pattern.