github-auth

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes multiple instructions that explicitly embed personal access tokens or passwords into commands or outputs (e.g., echo "<THEIR_TOKEN>" | gh auth login, export GITHUB_TOKEN="", and embedding tokens in remote URLs or grepping ~/.git-credentials), which would force the LLM to handle or produce secret values verbatim.