matrixscan-batch-web

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to retrieve a Scandit license key via MCP and embed it directly into the code rather than using environment variables, creating an exfiltration risk as the secret passes through the LLM's context and output.