Skills
Navigate
skills/ali-master/skills/oRPC Publish Client to NPM/Snyk

oRPC Publish Client to NPM

Fail

Audited by Snyk on Jul 23, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill shows and promotes passing an API key as a string literal into request headers (createMyApi(apiKey) and usage createMyApi('your-api-key')), which encourages hard‑coding or echoing secrets and would require the LLM to include secret values verbatim if populated.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 23, 2026, 10:49 PM
Issues
1
Security Audit — snyk — oRPC Publish Client to NPM