no-mistakes

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to include the user's --intent verbatim in a shell command and to relay pipeline findings verbatim, so any secret the user or pipeline embeds would be reproduced exactly in the agent's output/commands, enabling exfiltration.