barcode-capture-web

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to retrieve an API license key via an MCP tool and write it directly into the code as a plain text string ("put the key into the code: write it into the licence-key call in place of the placeholder"), creating a secret exfiltration risk.