skill.md:162— → matches Connection string with password pattern
Possible hardcoded secret (Connection string with password) — post*****************s@
post*****************s@
Fix Remove the secret from source, rotate it, and reference it via an environment variable instead.