cargo-cli-storage

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly demonstrates passing an API token as a command-line argument (cargo-ai login --token ), which encourages embedding secret values verbatim in commands and thus risks secret exfiltration.