revx-telegram

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill prompt instructs the agent to guide the user in obtaining a Telegram bot token, receive it from the user, and pass it as a command-line argument (--token <bot-token>), which leads to direct handling and exposure of secret values through the LLM context and output.