production-readiness-agentkit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs running commands that echo environment secrets (echo $SCALEKIT_CLIENT_SECRET) and posts client_secret in a curl request, which requires reading and potentially outputting secret values verbatim, creating an exfiltration risk.