playwright-skill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill's examples and workflows include embedding plaintext credentials directly into generated scripts (e.g., test login with 'password123') and would likely ask for and write user-provided credentials verbatim into /tmp scripts or commands, which forces the LLM to handle and output secrets directly; while env-var header usage is safe, the explicit plaintext credential pattern creates a real exfiltration risk.