seo-content-gap

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask the user to paste their login and API password, then parse those exact values and write them into ~/.claude/skills/seo/.env, which requires the LLM to handle and output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill instructs the assistant to prompt the user to paste API credentials into chat and then parse and persist them to a local file, creating a clear credential-theft/exfiltration risk (even if intended for legitimate setup) because secrets are being solicited via conversation.