configure

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt asks the agent to collect client_id/client_secret and access tokens and to embed them verbatim into shell commands (e.g., security add-generic-password -w "<client_secret>") and to write access_token/refresh_token into the settings file, which requires the LLM to handle and output secret values directly.