vector-store

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I found a hardcoded Postgres connection string containing a username and a high-entropy password token (npg_24bYhdRcyZax) embedded directly in scripts. This is a real literal credential (not a placeholder like YOUR_API_KEY or a simple setup password) and can provide direct DB access, so it qualifies as a secret. No other high-entropy secrets or private keys are present; other values are documentation/examples or environment variable names.