find-bugs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt explicitly requires retrieving full diffs and reading every changed line and producing evidence from those lines, which can force the model to reproduce secrets (API keys, tokens, passwords) present in the repository diffs or files verbatim in its output, creating an exfiltration risk.