hash-identify

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs embedding user-provided plaintext and hash values directly into shell commands and printed Python output (echo and print the plaintext on match), which requires the LLM to reproduce secrets/plaintext verbatim and thus creates an exfiltration risk.