chembl-search

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill tells the agent to ask the user for their Valyu API key and then run a shell command embedding that key verbatim (scripts/search setup ), which forces the LLM to handle and output the secret directly and exposes it in command-line history/output.