project-retrospective

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt requires historian agents to extract and "QUOTE" verbatim user messages and concrete references from session exports and to write synthesized retros into repo files, so if any exports contain API keys, tokens, or passwords those secrets would be reproduced and committed — creating a clear exfiltration risk.