iblai-vibe-scaffold

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs mapping TOKEN/PLATFORM from iblai.env into .env.local (e.g., IBLAI_API_KEY) and rendering templates with filled-in variables, which requires reading and embedding secret API tokens verbatim into generated files — a direct secret-handling/exfiltration risk for an LLM that outputs those files.