p-image

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to ask the user to paste their Pixazo API key into the conversation and to save/use it (store at ~/.pixazo/api-key and include in API calls), meaning the LLM will handle the secret value verbatim and could output it.