enrich-csv

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The generated script explicitly inserts CSV input values verbatim into per-row API prompts/requests (row_description → prompt) so any secrets in those columns or any user-supplied credentials would be sent through the LLM/API, even though the ZO token itself is read from an environment variable.