pre-pr-scan

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to scan diffs/files for hardcoded secrets and to report security issues (with descriptions) after deep-dives, but gives no guidance to redact or avoid printing secret values, so the agent would likely access and could output secrets verbatim.