crw-best-practices

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes example code that embeds an API key parameter directly (e.g., api_key="crw_live_..."), which encourages placing real secrets verbatim into generated code/commands and thus requires the LLM to handle/output secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes crw verbs (search/scrape/crawl/map/extract) where outsider-authored web page content can be ingested via user-provided URLs returned from search or directly passed to scrape at runtime, exposing the workflow to indirect prompt-injection.