manage-apps-and-sounds-headless

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly captures a 30-character API token from the app page and provides a --reveal option to print that token (and also uses email/password env vars for login), which requires the agent to output secret values verbatim.