projects

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to detect and read API tokens from environment/config files and demonstrates using them inline in API calls and code (e.g., curl -H "Authorization: {api_token}" and embedding {sdk_key}), which requires the LLM/agent to handle and potentially output secret values verbatim.