Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or ana
plugins/insecure-defaults/skills/insecure-defaults/SKILL.md(main)