v4-to-v5-migration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). This skill scans and edits code to move auth params (sdkAppId, userId, userSig) and will read and rewrite those values from files, so if they are hard-coded secrets it will cause the LLM to handle and potentially output them verbatim.