image-delete

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to read and expose the API key (via echo $LABNOCTURNE_API_KEY and fetching a test key) and to embed that key verbatim into a curl command Authorization header, which directly exposes secrets and enables exfiltration.