tidy-code

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires including verbatim "original code snippet" lines from reviewed files in its findings and spawns sub-agents that read project files, so any hardcoded secrets in source (or non-excluded files) would be read and emitted directly, creating an exfiltration risk.