game-qa

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly requires recording the runtime "environment" and storing authoritative commands/complete runs in evidence files (qa/verification.json), which can contain environment variables, API keys, or other secrets verbatim and thus forces the agent to output secrets.