pp-surfline

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly tells operators to run 'surfline-pp-cli auth login' with an email/password or to run 'surfline-pp-cli auth set-token ' (and mentions SURFLINE_ACCESS_TOKEN), which would require embedding user passwords or tokens verbatim into CLI invocations/outputs, creating a direct secret-exfiltration risk.