socialclaw

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly requires a workspace API key and includes examples that pass the key directly on the command line (and instruct validation), which means the agent may need to ask for or embed the secret verbatim in commands or outputs.