plugin-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly instructs scanning for hardcoded secrets and requires reporting failed checks (including fix commands) but gives no guidance to avoid printing or to redact secret values, so the LLM may need to read and output secrets verbatim.