dotnet-project-analysis

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to read and "report" contents of config files (e.g., nuget.config, appsettings.json) which often contain plaintext credentials or packageSourceCredentials, so the agent may be required to output secret values verbatim, creating an exfiltration risk.