serving-schema-review

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I found a literal API-key-looking value in the test cases. In evals/evals.json line [113] the DDL contains a default of 'sk-live-4f8a2b9c' (CREATE TABLE ... api_key TEXT DEFAULT 'sk-live-4f8a2b9c'). This matches the "sk-live-..." API key pattern and is an embedded credential-like literal (not a named placeholder such as YOUR_API_KEY or sk-xxxx). The eval file even treats this as a suspicious credential in its expected behavior. No other high-entropy secrets, private keys, or real credentials appear in the other files; other strings are documentation, headings, examples, or platform references to public docs and are not secret values.