15% of AI agent skill files carry hardcoded credentials with DB write access | Hacker News Reader