security-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt instructs scanning for and reporting hardcoded secrets and even provides example reports that include secret tokens and vulnerable code snippets, which risks verbatim secret output despite a guideline to mask values—so the LLM may be prompted to handle or print secrets directly.