infra-as-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires the agent to paste "current code" snippets from user-supplied IaC and explicitly calls out hardcoded credentials as critical findings, which means secrets or API keys present in the provided code would be reproduced verbatim in the report, creating an exfiltration risk.