dfyx-code-security-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's SecretFinder captures hardcoded secrets (matching real key patterns) and the ReportGenerator inserts the matched secret preview (secret['matched']) directly into generated output, forcing the agent to include secret substrings verbatim in reports.