scada-timeseries

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's OSDU ingestion code directly injects osdu_config['token'] into the Authorization header (and the example shows a plaintext "<access_token>" placeholder), so an agent implementing or emitting requests/commands could be required to include user-provided API tokens verbatim, creating an exfiltration risk.