contribute

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The file tests/test_contribution_safety.sh contains a literal GitHub personal access token-style string: "ghp_abcdefghijklmnopqrstuvwxyz0123456789". This matches the SECRET pattern (ghp_...) and is a high-entropy token-like literal, not a named placeholder or obvious example password, even though it is used in a test to exercise the scanner. Per the rules, such a literal API-token pattern must be flagged because it appears to be a real credential format and could be mistaken for an active token.