security-review

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly directs the reviewer to identify and report hardcoded secrets and to include vulnerable code snippets as "evidence", which can require echoing secret values verbatim from the supplied code (exfiltration risk).