learning

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly prompts the user to "Enter your agent-fs API key" and stores backends.agentFs.apiKey in the config (and may write it into files or use it in CLI operations), which requires the LLM to handle and output the secret value verbatim.