codebase-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The report explicitly requires including "Current code — short snippet(s) of the problematic code" from files you read, so if any reviewed files contain hard-coded API keys, tokens, or passwords the LLM would be forced to output them verbatim, creating an exfiltration risk.