terraform-plan-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs including the full plan.json content in agent prompts and aggregated reports (and to dispatch those in one message), which can contain sensitive values (secrets, API keys, passwords) and therefore forces the LLM to handle/output secrets verbatim.