gcp-mcp-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit CLI flag for supplying an API key (--google-maps-key YOUR_KEY) and describes scripts that generate/write API keys into config files, which encourages passing secrets as command-line arguments or embedding them verbatim in output/config—an insecure pattern that can lead the agent to handle or echo secret values.