skill.md:167— → matches Connection string with password pattern
Possible hardcoded secret (Connection string with password) — post************************************}@
post************************************}@
Fix Remove the secret from source, rotate it, and reference it via an environment variable instead.