google-drive-upload

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill tells the agent to read a local config containing the script URL and API key and to embed the apiKey and SCRIPT_URL verbatim into a curl POST (and shows an example with the key in the JSON), which requires the LLM to handle and output secret values directly.