paw-cra-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt instructs the agent to collect API keys (fal_key, elevenlabs_api_key, pexels_api_key), write them into a temp JSON and user config, and display a full confirmation/what-was-written summary, which requires the LLM to handle and potentially output secret values verbatim (no redaction or env-only handling specified).