stitch-upload-to-stitch

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the LLM to extract an API key from configuration files or ask the user for it, and then pass it directly as a command-line argument (--api-key <API_KEY>) to a script, which exposes the secret in the LLM's context and output.