cnb-token

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to ask the user to paste their API token and then explicitly embed it in environment configuration commands (e.g., setx CNB_TOKEN "<PAT>" or export CNB_TOKEN="<PAT>"), causing the secret value to pass through and be processed by the LLM context and output.