tutorial-checker

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly instructs the agent to scan repository files for API keys/tokens (grep for patterns like sk-, key-, token, password) and to report findings, which would require reading and potentially outputting secret values verbatim if they are present.