coding-best-practices

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires pasting exact "Current:" code snippets and showing exact file:line locations (and checks for "No hardcoded secrets") without instructing redaction, which would force the LLM to reproduce any secrets present in reviewed code verbatim, creating an exfiltration risk.