rightcode-codeprobe

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The orchestrator preloads user source files and mandates quoting exact code lines as "evidence" and producing copy-pasteable fix prompts and a saved markdown report, so any hard-coded secrets (API keys, tokens, passwords, .env contents) present in those files would be included verbatim in the assistant's output and saved report, creating a high exfiltration risk.