upload

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to read/echo the LABNOCTURNE_API_KEY (or extract a generated test key) and then embed that key verbatim into curl Authorization headers (and potentially display it), which requires the LLM to handle and output secret values directly.