search-console-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly says the agent "drafts the exact TXT value" (the google-site-verification token), which requires the LLM to output a provider-issued verification token verbatim, creating a secret-exfiltration risk.