explain-code-tutor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt mandates quoting verbatim snippets from the real project files and to locate/follow code paths, which can force the model to read and output sensitive values (API keys, tokens, passwords) present in config or env files, creating an exfiltration risk.