rails-upgrade-assistant

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read users' actual config files and include real code examples and config diffs from the user's project in reports, which would require outputting any secrets (API keys, tokens, passwords) found verbatim—an exfiltration risk.