salvo-database

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompts include hardcoded database connection strings like "postgres://user:pass@localhost/db" (credentials embedded in code), which instructs embedding secret values verbatim in outputs and thus poses a high exfiltration risk.