prod-ready

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly instructs scanning for hardcoded API keys/tokens with regexes and to "list any" sensitive files/patterns in the report, which would cause the agent to surface matched secret values or snippets verbatim — creating high exfiltration risk.