obsidian-git-repo-sync

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill asks the user for a Git remote URL and then uses and reports that URL verbatim in commands and in the result; if a user supplies an HTTPS URL containing embedded credentials (e.g., https://user:token@github.com/...), the agent would be required to handle and output secrets directly.