cs-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill mandates including file:line plus exact code snippets as evidence when reporting findings; if those snippets contain API keys, tokens, or passwords the LLM would output them verbatim and there is no instruction to redact or avoid exposing secrets.