byted-ark-seedream-skill

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to prompt users to paste API keys (ark-xxx) into the conversation and to accept/pass/save an api_key parameter, which means secrets will be exposed to the LLM and could be echoed or embedded—this is a high-risk pattern for credential exfiltration.