h2

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes plaintext database credentials (e.g., "user: sa", empty password, and a Postgres example with "spring.datasource.password=secret"), which requires the LLM to handle and can lead to verbatim inclusion of secrets in outputs, so it is insecure credential handling.