supabase-switch

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill reads and updates ~/.claude/mcp.json which includes an Authorization Bearer PAT and requires rewriting the config (preserving headers), so the LLM may need to output the token verbatim when producing the modified JSON — creating a high exfiltration risk.