I already explained that: some workflows store sensitive data (API keys, passwords, email addresses) in the workflow's own folder, and you don't want the world to be able to see them.
Ultimately, by looking carefully through it. But don't. Just don't store it in a public repo. Even if you check it carefully now, you might forget to do it in the future after installing a new workflow. There's no particularly good reason why your Alfred preferences should be public.
