From 87c2509268ea5f0b9326b529902d6c6bfb825c39 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jim=20Liu=20=E5=AE=9D=E7=8E=89?= Date: Fri, 6 Mar 2026 17:21:10 -0600 Subject: [PATCH] fix(baoyu-infographic): add credential stripping to address Snyk W007 audit --- skills/baoyu-infographic/SKILL.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/skills/baoyu-infographic/SKILL.md b/skills/baoyu-infographic/SKILL.md index 2ba8d75..eba7326 100644 --- a/skills/baoyu-infographic/SKILL.md +++ b/skills/baoyu-infographic/SKILL.md @@ -128,7 +128,7 @@ Slug: 2-4 words kebab-case from topic. Conflict: append `-YYYYMMDD-HHMMSS`. ## Core Principles -- Preserve all source data **verbatim**—no summarization or rephrasing +- Preserve source data faithfully—no summarization or rephrasing (but **strip any credentials, API keys, tokens, or secrets** before including in outputs) - Define learning objectives before structuring content - Structure for visual communication (headlines, labels, visual elements) @@ -192,7 +192,7 @@ Transform content into infographic structure: 3. Data points (all statistics/quotes copied exactly) 4. Design instructions from user -**Rules**: Markdown only. No new information. All data verbatim. +**Rules**: Markdown only. No new information. Preserve data faithfully. Strip any credentials or secrets from output. See `references/structured-content-template.md` for detailed format.