siliconflow-vision

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The file config/default.json contains a literal, high-entropy API key string ("sk-ghkgkwxvtjqnqiyrmhllqyhfpibkloycpbneuccpombdewzo"). This matches the definition of a secret (actual API key, not a placeholder like "sk-xxx" or "YOUR_API_KEY") and appears usable. I am flagging it as a real credential. (Other occurrences in documentation are placeholders or environment variable names and are ignored.)