git-repo-audit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). 该技能包含“密钥泄露扫描”并会检测并报告历史提交中出现的 AWS/GitHub/SSH/private keys 等敏感值，输出报告很可能包含这些秘密字符串，从而要求模型处理并原文输出机密，存在明显的外泄风险。

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is the Git repository’s commit history (e.g., commit messages/authors and especially added diff lines via git log ... --name-only/--pretty=format: -- and git log ...), which the scripts parse and print at runtime (notably secret-scan.sh matches and outputs matched_text from added lines).