git-commit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt requires the agent to display staged/unstaged file diffs and produce commit output, which can cause any secrets present in those diffs (API keys, tokens, passwords) to be echoed verbatim in the agent's output, creating an exfiltration risk.