paligo-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly demonstrates HTTP Basic auth with the API key embedded in a curl command (username:API_KEY) which requires or encourages including secret credentials verbatim on the command line and in generated requests, an insecure pattern that enables exfiltration.