linkfox-echotik-list-new-product-rank

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I inspected the skill files for literal, high-entropy credentials. I flagged the fixed base64-like UID string in scripts/onboarding.py because it is a literal, non-placeholder, random-looking value used as a login header ("登录链路固定 uid header（实测可用）"). This value is not an obvious documentation placeholder and is used in the authentication/login flow (could be abused to impersonate a uid/header), so it meets the definition of a secret to surface.

No other high-entropy API keys, JWTs, PEM/private keys, or long tokens are present. Environment variable names (e.g., LINKFOX_AGENT_API_KEY) and curl examples using those env vars are documentation placeholders and are intentionally ignored.