mcdonalds-coupons

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs asking users for MCP tokens and embedding them directly into commands or scripts (e.g., python scripts/token-manager.py add <name> <token> and python scripts/mcd-mcp.py ... <token>), and even includes example token strings, which forces the LLM to handle/output secret values verbatim.