Missing User Warnings
Medium
- Confidence
- 93% confidence
- Finding
- The skill requires a privileged Cloudnet API key and instructs the user to configure it, but does not warn about its sensitivity, scope, storage, or safe handling. This increases the risk of accidental secret exposure in prompts, logs, shell history, screenshots, or misconfigured environments, which could allow unauthorized access to network management data and actions.
