bk-cli-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly shows and permits passing authorization headers and tokens (e.g., X-Bkapi-Authorization:{"access_token":"custom-token"}) as command flags, which encourages embedding secret values verbatim into generated commands/outputs.