expo-skill-feedback

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the repository for literal, high-entropy values that look like real credentials. I found a literal PostHog project API key assigned to POSTHOG_PROJECT_API_KEY. It is a high-entropy, non-placeholder string (starts with "phc_...") and is directly present in the code. The file's comment notes this is a write-only/public ingestion key (safe to commit), but per the secret definition it is an actual API key present in the codebase, so I flag it as a credential occurrence rather than ignoring it as a placeholder or low-security example.