workflow-lite-test-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to embed raw test output and file:line evidence into prompts, checklist JSON, and reports (e.g., ${testChecklist.execution.raw_output} and per-criterion file:line evidence), which will verbatim include any secrets present in those files or outputs.