review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires the reviewer to quote offending snippets from the diff (path:line) and explicitly inspects tokens/credentials (e.g., license tokens, bootstrap/admin creds), so if secrets appear in the diff the agent is instructed to include them verbatim in its output — creating a high exfiltration risk.