sap-cap-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill reads project config files (including xs-security.json, manifest.yaml, etc.) and requires embedding verbatim file excerpts as "Evidence" in the report with no redaction rules, so it can expose API keys/secrets directly in output.