env-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs generating secret tokens and embedding them verbatim into shell commands (e.g., echo 'BOT_API_TOKEN={token}' >> ...), so the agent would need to handle and output secret values directly, creating an exfiltration risk.