vector-databases

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt contains multiple examples that pass API keys and connection strings as literal parameters (e.g., api_key="your-api-key", api_key="your-key", psycopg2.connect("postgresql://...")), which encourages embedding secrets verbatim in generated code rather than using environment variables or secure credential stores.