codex-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to scan project files for "機密情報の露出リスク" and to report specific problematic locations but gives no guidance to redact secrets, so the LLM could read and output secret values verbatim (exfiltration risk).