iblai-agent-chat

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to ask the user for their agent/mentor UUID and write it directly into .env.local (and shows env var placeholders like NEXT_PUBLIC_MAIN_TENANT_KEY=), which requires the LLM to accept and embed secret values verbatim into generated file content—an exfiltration risk.