bmob-cloud-function-development

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt tells the agent to prefer and present invokeGuide.rest.curl which "already contains X-Bmob-Application-Id and X-Bmob-REST-API-Key", forcing the LLM to include real header credential values verbatim in outputs (secret exfiltration risk).