backend-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.95). The skill requires reviewers to include "evidence" as quoted code snippets and explicitly instructs checking for "secrets in code/logs", so if secrets appear in the repo the agent is expected to quote them verbatim in its findings unless it independently redacts them.