codex
Fail
Audited by Snyk on Jul 28, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill explicitly requires returning exact commands and "preserve CLI tokens verbatim," which would force the LLM to reproduce any API keys, bearer tokens, or other secrets present in CLI commands or output, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata