wdk-review-types-jsdoc

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). Because the prompt requires pasting "offending code" and "corrected code" verbatim from source files, any embedded secrets (API keys, tokens, cookies, or passwords) present in those files would be output directly, enabling exfiltration.