zh-code-reviewer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill reads project files and produces code examples while explicitly checking for "硬编码密钥" (hard-coded keys) but gives no instruction to redact secrets, so it may expose secret values verbatim in its output.