docker-patterns

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill contains hardcoded credentials and an explicit API-key-like example (e.g., DATABASE_URL with postgres:postgres, POSTGRES_PASSWORD=postgres, and ENV API_KEY=sk-proj-xxxxx), which encourages embedding secrets verbatim in generated compose files/commands and thus risks secret exfiltration.