commit-context

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). This prompt directs the agent to call the agent memory HTTP endpoint with an Authorization: Bearer $AGENTMEMORY_SECRET header, which can lead the model to emit the secret verbatim in generated commands or requests (e.g., curl), creating an exfiltration risk.