local-dev-orchestration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt embeds hard-coded plaintext credentials (e.g., DATABASE_URL and POSTGRES_PASSWORD using "jarvis:jarvis") and example config files that an agent would reproduce verbatim, which requires the LLM to handle and output secret values directly and thus poses an exfiltration risk.