vat-declaration-prep

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill tells the agent to read scene-level config (including taxpayer identity/tax number) from ../../CLAUDE.md and to generate declaration output containing [公司名称] and [税号] verbatim, which requires the LLM to handle and emit sensitive identifiers directly.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)