secure-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's required output format instructs the agent to include "Evidence" code snippets in findings, and the skill itself contains examples of hard-coded secrets (e.g., DB_PASSWORD = "s3cretPassw0rd!"), which means the agent would be expected to expose secret values verbatim in its generated report.