build-yaml-misconfiguration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt includes multiple explicit hardcoded secrets and token-like values in code examples (e.g., "hunter2", "my-secret-token", "sk-secret-value"), which require the LLM to emit those secret-like strings verbatim and represent a high exfiltration risk.