ag2-quickstart

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples that pass api_key directly in code (including a literal "sk-..." placeholder and a per-ask override pattern), which encourages embedding user secrets verbatim into generated code/requests rather than using env vars or CLI auth, creating an exfiltration risk.