cargo

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the documentation for literal high-entropy values that could be usable credentials. I found a realistic-looking auth token in the registries credentials example: token = "854DvwSlUwEHtIo3kWy6x7UCPKHfzCmy" (references/registries.md). This is not a placeholder like "…" or "YOUR_API_KEY", is not truncated, and has the entropy and structure of a real registry token, so it should be treated as a secret. Other occurrences (e.g. token = "…") are clearly placeholders/ellipses and were ignored.