ui-visual-validator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes a CLI example that embeds a project token directly as a command-line argument (npx chromatic --project-token=), which requires placing a secret verbatim in output/commands and is an insecure secret-handling pattern.