promote

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to read arbitrary project memory and include "validation evidence" and file-derived summaries in promotions/reports without any guidance to redact or avoid embedding raw file contents, so it could expose secrets verbatim from those files.