audit-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to "quote the hunk and the surrounding file" and to run/print diffs (git diff) so the model may be required to reproduce file contents verbatim, which can include hardcoded secrets and thus enables secret exfiltration.