login-2fa-flow

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to run a "code command", capture the TOTP code from stdout and insert it into the login form (execSync(CODE_COMMAND) → fill(code)), which requires the model to handle and emit the secret code verbatim and even admits the code will appear in the model transcript.