project-optimizer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The workflow explicitly instructs the agent to extract passwords/tokens/API keys from project files and place them into a .credentials.json (and replace occurrences), which requires the agent to read and reproduce secret values verbatim when creating/updating those files.