chroma
Fail
Audited by Snyk on May 2, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes an example that passes api_key="YOUR_API_KEY" directly into OpenAIEmbeddingFunction (an inline API key in generated code), which encourages embedding raw secrets verbatim in outputs and thus requires the model to handle secret values directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata