qa

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to capture authentication tokens (e.g., JWT) and use them in subsequent curl/API calls (embedding them in requests/commands), which requires the LLM to handle and potentially output secret values verbatim, creating exfiltration risk.