github-auth

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes explicit commands that ask the user to copy/paste a personal access token into shell commands (e.g., echo "<THEIR_TOKEN>" | gh auth login --with-token and export GITHUB_TOKEN=""), which would require an agent to accept and embed secret values verbatim if followed.