browserstack-tester

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I inspected the documentation for literal, usable credentials. In reference/troubleshooting.md there is a JSON snippet showing config credentials:

{ "login": "admin", "password": "123456789MikoPBX#1", "password2": "admin" }

The "password" value ("123456789MikoPBX#1") is a concrete password (not a placeholder), non-trivial (contains digits, letters, and a symbol) and therefore could be a real credential granting access to the PBX/admin. It is not one of the ignored cases (not a placeholder, not an obvious trivial setup password). No API keys, tokens, or private keys were found elsewhere in the docs. Therefore this should be treated as a leaked secret and remediated (remove from docs/config, rotate, use environment/config secrets management).