flow-deliver

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill mandates reading and then outputting and posting the exact contents of generated validation files (via cat "$VALIDATION_FILE" and gh pr comment), which can include verbatim code snippets or discovered secrets (hardcoded keys, tokens), so the LLM may be required to handle and emit secret values directly.