roadmap-discovery

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly scans for hardcoded credentials and records/generates findings and artifacts (JSON, GitHub issues, contextd records) without any instructions to redact or avoid printing matched secret strings, so the LLM may include secret values verbatim in outputs.