hackathon-post-mortem

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill accepts an exposed_secrets input and produces specific git-rewrite/scrub commands that inherently require embedding the exact secret strings (or replacing them verbatim) in the generated commands, which forces the LLM to handle/output secret values directly.