spring-boot-security-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt explicitly instructs inspecting application.{properties,yml} for literal credentials and scoring/reporting findings but gives no guidance to redact or avoid echoing secret values, so the agent may need to include secrets verbatim in its output.