fable-safe-prompt

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires returning the user's prompt "in full, verbatim" (with minimal edits) and placing it inside a pbcopy shell block, so any API keys/passwords/cookies present in the user's prompt would be echoed verbatim by the model and copied to the clipboard, creating a high exfiltration risk.