software-design-review

[Skill Scanner] [Documentation context] Credential file access detected The code fragment is a coherent, non-executable design-review guideline aligned with the stated purpose of evaluating software design quality. It does not introduce runtime behavior, credential handling, or network activity. Its footprint is focused on analysis methodology rather than data processing or agent actions, making it benign in itself, provided it is applied consistently and language-agnostically. LLM verification: [LLM Escalated] The skill concept is coherent and aligns with a design-quality focus. The main concern lies in the documented credential-file references (.kube) appearing in SKILL.md. If these references are only descriptive examples in documentation and never executed by tooling, risk remains low. If, however, the implementation allows or uses credential paths (e.g., reading ~/.kube) as part of analysis workflows, this constitutes a potential data leakage or exfiltration risk and should be restricted to explic