pymatgen

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt shows examples that embed an API key directly (pmg config --add PMG_MAPI_KEY your_api_key_here, MPRester("your_key"), and a config file with PMG_MAPI_KEY), which would require substituting and outputting secret values verbatim if actual keys are used, creating an exfiltration risk.