suparank/pipeline

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read credentials from local files and to call external services (e.g., fal.ai via curl and CMS publish calls), which requires embedding API keys/JWTs in generated requests/commands and thus would expose secrets verbatim in the agent's output.