linkfox-shopee-store-account-health

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the skill files for hardcoded, high-entropy credentials. Most values are placeholders (e.g., "", "xxx") or ordinary defaults (URLs, numeric IDs) which are documentation examples or non-secret defaults and therefore ignored.

However, scripts/onboarding.py contains a literal base64-like string assigned to _LOGIN_FIXED_UID (used as a fixed uid header in the login chain). It is not a placeholder and appears to be a static, token-like value that could be used in request headers. Because it is a high-entropy literal (not a simple example/password) and is used in an authentication-related header, I flag it as a potential hardcoded credential.