pmf-analysis

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly requires reading the actual codebase and "referencing specific files and lines for every finding," which can force the agent to reproduce verbatim file contents (including any embedded API keys, tokens, or passwords) and thereby creates an exfiltration risk.