project-analyzer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to read configuration files such as .env and to list configuration items and default values, which can require outputting secret values (API keys, passwords, tokens) verbatim in the generated documentation.