cc-skill-project-guidelines-example

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes literal-looking API keys and tokens in the Environment Variables section (e.g., ANTHROPIC_API_KEY=sk-ant-..., NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJ...), which can cause the LLM to reproduce or embed secrets verbatim even though the task text doesn't explicitly require secret handling.