hackathon-sponsor-integrator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill asks the agent to parse raw documentation to "extract key credentials/configurations" and produce minimal bootstrap code to verify API connections, which can require embedding or echoing real API keys/tokens from the documentation unless the prompt explicitly forces using environment variables/placeholders, so it presents a high risk of verbatim secret exposure.