lab-forge

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly requires producing a professor-only ground_truth.md (planted properties, seeds, seed↔student mappings) and a verification_record.md (commands and outputs), which means the agent must generate and emit secret values (seeds/ground-truth and potentially sensitive command outputs) verbatim into its outputs.