security-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill runs secrets detection (gitleaks) and outputs/stores structured scan findings and reports with no mention of redaction, so detected secret values (API keys/tokens/passwords) would likely be included verbatim in outputs and in memory—posing an exfiltration risk.