prop-drill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires extracting and reproducing exact source-code snippets (clickable code blocks with file:line ranges) from the repo, which would force the model to output any secrets (API keys, tokens, passwords) present verbatim, creating an exfiltration risk.