cove

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). While the prompt doesn't ask for credentials explicitly, it requires extracting and reprinting "factual claims" from the draft (and forwarding them to subagents), so any secret present in the draft would be included verbatim in outputs and tool calls, creating an exfiltration risk.