barcode-capture-flutter

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill prompt explicitly instructs the agent to obtain a secret license key via an MCP tool or user prompt and then "put the key into the code" rather than keeping it in an environment variable, creating an exfiltration risk.