google-ads-keywords-search-volume

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly allows a --token override and even shows an inline bearer-token command example, which would require the LLM to include secret values verbatim in generated commands (an exfiltration risk), despite recommending env-var usage.