database-lookup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to read API keys from the environment and explicitly shows a command to echo an env var and to read a local .env file, which encourages revealing secret values (and may cause the LLM to output them verbatim in commands or responses).