sales-funnelkit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill repeatedly instructs forming requests that include the API key as a URL query parameter (e.g., "?api_key=..." and "append ?api_key={key}"), which would require the model to embed user-provided secret keys verbatim into generated requests/commands — a direct exfiltration risk.