stitch-upload-to-stitch

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to extract the API key and pass it as a command-line argument (--api-key <API_KEY>) to a Python script, causing the secret to pass through the LLM context and appear in the executed command output.