k8s-manifest-generator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly includes Secret manifests with plaintext stringData (e.g., DATABASE_PASSWORD: "changeme", API_KEY: "secret-api-key") and guides generating Secret resources, which can require the agent to embed actual secret values verbatim (or ask the user for them), creating an exfiltration risk.