agentic-actions-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). This skill instructs the agent to fetch workflow files and include YAML snippets/evidence and to "capture" sensitive fields (e.g., a GitHub "token"), which forces the LLM to read and potentially output secret values verbatim from fetched files.