monitor-webcams

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds a literal API key value in the documentation (wm_0123456...), and shows header usage that could cause an LLM to reproduce or require verbatim secret values, creating an exfiltration risk.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). Line 10 contains a literal, high-entropy API key-like string: "wm_0123456789abcdef0123456789abcdef01234567". This is not a generic placeholder (e.g., YOUR_API_KEY or sk-xxxx), nor a simple setup password, and therefore appears to be a real/usable credential format and is flagged. Environment variable references such as $WM_API_KEY (lines 80 and 94) are just names and ignored per the rules.