btp-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes examples that pass passwords (and user-provided values) directly on the command line (e.g., --password) and instructs the agent to ask for missing parameter values and produce complete runnable commands, which encourages collecting and embedding secrets verbatim in outputs and creates an exfiltration risk.