dev-workflow

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill prompt embeds plaintext credentials (staging and bootstrap admin passwords) directly in the instructions, meaning the LLM would have secret values in its context and could be asked or prompted to reproduce them, creating an exfiltration risk.