webflow-code-component:deploy-guide

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly shows and encourages placing workspace API tokens into env vars and running commands with a --api-token flag or exporting the token (including examples like npx webflow library share --api-token YOUR_TOKEN_HERE), which requires reading or embedding secret values verbatim and thus poses an exfiltration risk.