spec-to-code-compliance

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill mandates quoting exact excerpts from provided documentation and code ("Always cite exact evidence", "Every claim must quote original text or line numbers"), which forces the model to reproduce any secrets present in inputs verbatim, creating a high exfiltration risk.