yy-frontend-vue2-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill reads source files and outputs code snippets and exact problematic lines (including hard-coded sensitive strings) without any redaction or instruction to mask secrets, so it can exfiltrate API keys or passwords verbatim.