pii-removal

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes hardcoded API key examples and cURL/HTTP headers that require an X-API-Key value (e.g., "sk_live_YOUR_KEY" and -H "X-API-Key: YOUR_KEY"), which encourage embedding secrets verbatim in commands or code and therefore requires the LLM to handle/output secret values directly.