qrspi-create-research

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to read files and include concrete code examples and file:line snippets verbatim in reports, which means any hard-coded API keys, tokens, or passwords found in the repository would be output unchanged and thus exposed.