gemini-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to include the actual git diff/relevant code in the Gemini prompt and pass it via the gemini -p command line, which would cause any secrets in the repo (API keys, tokens, passwords) to be handled and potentially echoed verbatim in prompts/outputs and exposed on the command line.