owasp-top-10-web

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's output format explicitly asks for "Evidence: Code snippet or configuration excerpt" and its detection patterns flag hard-coded secrets (e.g., api_key/password), which would require the model to reproduce secret values verbatim in findings unless redaction is enforced.