alterlab-rowan
Fail
Audited by Snyk on Apr 12, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt explicitly shows an insecure "direct assignment" pattern (rowan.api_key = "your_api_key_here") that instructs embedding API keys as string literals in generated code, which would require the LLM to handle or echo secret values verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata