report

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to read an access_token from platform settings and include it in Authorization headers or in curl commands (and to execute or display those commands), which requires the LLM to handle and output the secret verbatim.