codebase-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill mandates reading local source files and "cite every finding with file path and line number" and to "return all findings as content to the caller", which can force the model to reproduce verbatim file contents (including any embedded secrets) in its output.