skills/aliyun/alibabacloud-aiops-skills/alibabacloud-emr-cluster-manage/Snyk

alibabacloud-emr-cluster-manage

Fail

Audited by Snyk on Apr 27, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to collect sensitive secrets (RDS username/password, MasterRootPassword) and to construct CLI/API calls (RunCluster/CreateCluster) that would embed those values as parameters, forcing the LLM to handle/output secrets verbatim.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Apr 27, 2026, 02:49 AM

Issues

1