money-restore

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to open and parse local snapshot files and to present sections "verbatim" (including YAML frontmatter and business-state text) with no redaction guidance, so any API keys/passwords stored in those snapshots would be reproduced exactly in the agent's output.