convex-nextjs-dual-environment-secrets

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs embedding secret values directly in commands (npx convex env set "your-secret-value") and passing them verbatim as mutation arguments from Next.js to Convex, which requires the LLM or operator to handle and output the secret text directly, creating an exfiltration risk.