refactor-research-code

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs extracting hardcoded literals into config/CLI and writing edited repo files (with ask-first edits), so any secrets present in the code would be read and reproduced verbatim in generated outputs, creating a high exfiltration risk.