qa

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill runs greps for committed secrets and requests secret-scan findings in the report but gives no instruction to redact or avoid echoing matched secret values, so the LLM may be required to include sensitive strings verbatim in its output.