review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill tells sub-agents to read diffs/specs and present findings "verbatim" and to quote spec lines, which can force the LLM to include repository or diff text (including any embedded secrets) directly in its output, creating an exfiltration risk.