project-guidelines-example

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains example environment variables that include token-like values (e.g., ANTHROPIC_API_KEY=sk-ant-..., NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJ..., SUPABASE_KEY=eyJ...), which would require the LLM to handle or could lead it to output secret values verbatim, creating an exfiltration risk.