deepreview

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The pipeline explicitly reads full file contents, includes static-analysis and gitleaks findings and command outputs in reviewer/verifier/gatherer outputs and final reports without any instruction to redact secrets, so API keys/tokens/passwords found in files or tool outputs could be included verbatim in generated outputs.