asc-app-shots

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes a --gemini-api-key CLI flag and examples that encourage passing API keys directly on the command line (an explicit insecure pattern that would require the LLM to include secret values verbatim in generated commands), even though env-var/file alternatives are mentioned.