apple-music

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs use of private keys and placement of developer/user tokens directly into request headers and example code (including reading a .p8 private key and constructing a JWT), which means an agent following the skill would need to handle or embed secret token/key values verbatim in generated requests or outputs.