criticalsuspicious.dangerous_execLocationsrc/skill.mjs:5FindingShell command execution detected (child_process).
criticalsuspicious.exposed_secret_literalLocationsrc/cli.mjs:154FindingFile appears to expose a hardcoded API secret or token.