ffmpeg-whip

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs embedding bearer tokens and query tokens directly into ffmpeg commands/headers (and exposes a --token argument), which requires the model to insert secret values verbatim into generated commands/outputs, creating an exfiltration risk.