SG-077: Skill paths targeting secrets
Severity: HIGH
`paths:` glob targets .env, credentials, *.pem, .ssh/, .aws/ or uses '**' overbroad scope.
Fires when
- Skill `paths:` glob targets secret-bearing files like .env, credentials, *.pem, *.key, id_rsa, .ssh/, .aws/, .npmrc, or .netrc.
- `paths:` uses an overbroad pattern ('**', '*', '**/*', './**') that fires on every file and bypasses the targeting safeguard.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.