yds-progress-dashboard

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to read local JSON summary files and embed their contents verbatim into the generated HTML (as JavaScript constants), which would cause any secrets contained in those files to be included in the LLM's output.