mine-plugins

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires the agent to "read every file completely" and run credential-detection inventory/security scans, which means it may encounter and be expected to report or reproduce hardcoded API keys, tokens, or passwords verbatim during analysis, creating a significant exfiltration risk.