rivetkit-client-javascript

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples that embed tokens directly (e.g., URL auth "https://namespace:token@api.rivet.dev", "https://my-namespace:pk_...@api.rivet.dev", and plain "jwt-token-here" params), which encourages placing secret values verbatim into code/requests rather than using environment variables or external auth mechanisms.