project-to-obsidian

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). It explicitly scans for */.env and configuration files and extracts environment variables/config items into generated docs that are written to the vault, which can require including secret values verbatim with no redaction or safe-handling instructions.