code-engine-specialist-skill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt repeatedly instructs embedding API keys, passwords, and other secrets directly into CLI commands and secret-creation flags (e.g., --apikey, --password, --from-literal) and asks the agent to prompt for authentication, which would require the LLM to accept and/or emit secret values verbatim.