linkfox-shopee-store-shop-category

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned for high-entropy literal values that could be used to access services. The only such value is the base64-like fixed UID header in scripts/onboarding.py which the code comments say is "实测可用" (actually usable) and is used as a fallback uid header for login. That literal (a long base64url string) is not a placeholder like "" or "xxx" and therefore qualifies as a potentially active credential.

All other occurrences are environment variable names, example placeholders (e.g. "", "xxx"), simple example IDs ("67890"), or URLs and static strings, which per the rules are documentation placeholders or non-secrets and were ignored.