publish-artifact

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to ask the user for API credentials (including a bearer token), emit export commands with those values into the session, and persist them into the agent's config/shell startup files, which requires the LLM to receive and output secret values verbatim.