gemini

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly captures git diffs and other context (including DIFF=$(git diff ...)) and injects ${CONTEXT} verbatim into gemini CLI prompts, which will cause the LLM/agent to see and potentially re-emit any secrets present in the repo or context (API keys, tokens, passwords) — an exfiltration risk.