santa-method

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The reviewer prompts require quoting and "record[ing] findings verbatim" and to "cite the exact problem" while being fed the original spec and output, so if those contain API keys, passwords, or tokens the reviewers are instructed to reproduce them in their structured JSON—creating a high-risk secret-exfiltration path.