native-ui

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt includes code examples that embed authorization credentials directly (e.g., .headers = { .value = "Bearer abc" }) and shows header/value patterns that would require emitting secret tokens verbatim, creating an exfiltration risk.