security-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly requires detecting and documenting "exposed credentials in code or config files" and producing detailed PoCs, file locations, and example payloads which would require the model to read and include secret values verbatim if present, creating an exfiltration risk.