here-now

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to collect a user-provided sign-in code and to use/save returned apiKey (including example curl and echo commands that embed those secrets), which requires embedding secret values verbatim into requests or filesystem writes and therefore creates a high exfiltration risk.