monitor-energy-disruptions

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly requires an API key in the X-WorldMonitor-Key header and even embeds a literal-looking API key example (wm_0123456789...), which encourages including secret values verbatim in requests/outputs.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The document contains a high-entropy, literal API key-looking value on line 10: "wm_0123456789abcdef0123456789abcdef01234567". It has a realistic prefix and long hex body (not a generic placeholder like YOUR_API_KEY or sk-xxxx), and is therefore treated as a real credential rather than a documentation example or simple setup password.