model-checkpoint-evaluator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to read and use the Hugging Face token from hf_token.txt for uploads, which requires the model to access and embed a secret value in authentication calls/commands, creating an exfiltration risk.