secure-code-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The checklist explicitly looks for and demonstrates hardcoded secrets (e.g., SECRET_KEY = "my-secret-key-123") and requires itemized findings and code-level fixes, which encourages the agent to identify and potentially echo secret values from submitted source files verbatim in the report.