pr-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The orchestrator requires including full unified diffs and quoting specific file lines as "evidence" in its final report and sub-agent prompts, so any secrets present in the repo/diff would be ingested and potentially reproduced verbatim — creating an exfiltration risk.