review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt requires the agent to "remove hardcoded secrets" as an auto-fix and to "cite the specific line proving safety" / "read and cite the handling code", which can force the model to read and reproduce lines that contain secrets verbatim in its report or fixes.