Make UGC

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt's REST/curl example explicitly shows an Authorization header with a bearer token (Authorization: Bearer $AGENT_MEDIA_API_KEY), which instructs embedding an API key into the request header and could cause the model to include secret values verbatim in generated requests or code.