nano-banana-image

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs users to add API keys via command-line arguments (e.g., keys add <name> <api-key>) and includes example keys/outputs, which requires the agent to accept and potentially echo secret values verbatim, creating an exfiltration risk.