codex-computer-use

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly asks for "test credentials" to be included in the self-contained prompt that is then piped into codex exec, meaning secret values would be submitted to and could be echoed back by the agent (commands, reports, or logs) — a direct exfiltration risk.