test-bk-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs generating CLI commands that embed credentials verbatim (e.g., --bk_app_secret="test_bk_app_secret" and --bk_token="test_bk_token"), which requires the LLM to handle and output secret-like values directly, creating an exfiltration risk.