google-agents-cli-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes examples and flags that embed secret values verbatim in commands (e.g., agents-cli deploy --secrets "API_KEY=my-api-key,DB_PASS=...") and shows echoing "YOUR_API_KEY" into gcloud, which would require the LLM to output secrets directly.