security-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs scanning for hardcoded secrets and requires including the exact vulnerable code snippet and "show the vulnerable code (before)" in patches, which forces the model to reproduce secret values verbatim in its output.