agent-history
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). ochist can return full, untruncated past session content (including commands, configs, outputs), so an agent using it may retrieve and therefore emit API keys, tokens, or passwords verbatim from prior sessions.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata