eliteforge-sonar-pmd-generator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows passing a Sonar token as a command-line argument (-Dsonar.token=<token>) and implies initializing/using tokens for scans, which would require embedding secret token values verbatim in generated commands or scripts.