prime-expand
Fail
Audited by Snyk on Jul 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to include the original "seed" verbatim in the sub-agent brief and in the emitted output (including refusal), so if a user supplies an API key/password as the seed the LLM would necessarily handle and output that secret verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata