uapi-post-text-aes-decrypt-advanced

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill entails calling an AES decryption endpoint and explicitly mentions supplying a UAPI Key (and implicitly an AES key/params) which the agent may need to embed verbatim in requests or generated commands, and it does not mandate secure patterns (env vars/CLI-managed auth), creating an exfiltration risk.