woodpecker-campaign

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs obtaining and placing the Woodpecker API key into request headers (e.g., "X-API-KEY: YOUR_KEY") and to use scripts that will embed that key in API calls, which requires the LLM/agent to handle or output secret values verbatim.