monitor-internet-outages

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds an explicit-looking API key value in the Authentication section (X-WorldMonitor-Key: wm_0123456789abcdef...), which would require or tempt an LLM to include that secret verbatim in generated requests or outputs.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The document contains a high-entropy, literal API key in the Authentication example: "wm_0123456789abcdef0123456789abcdef01234567". This is not a generic placeholder (e.g., YOUR_API_KEY) and appears to be a real-format credential (prefix + long random-looking hex string), so it should be treated as a secret.