skill.md:191— → matches Connection string with password pattern
Possible hardcoded secret (Connection string with password) — post*************************s@
post*************************s@
Fix Remove the secret from source, rotate it, and reference it via an environment variable instead.