burpsuite-project-parser

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs retrieving request/response headers and searching response bodies (including patterns like "password") without requiring redaction of sensitive headers or secrets, so the LLM could output credentials verbatim (even if truncated), creating an exfiltration risk.