lp-leads

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly asks for API keys/endpoints (e.g., Mailchimp API key, ConvertKit API key, HubSpot portal ID) and directs the model to wire up integrations and produce modified page files and an integration document, which would require the LLM to include those secret values verbatim in generated code/docs.