review-code

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires embedding the full contents of changed files into subagent queries (via cat/fs_read), which will include any hardcoded API keys, tokens, or passwords and thus forces the LLM to handle secret values verbatim.