openfinclaw-quantitative-research
Fail
Audited by Snyk on Jul 13, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The document instructs users (and shows examples) to provide an API key and to place it verbatim into env exports and JSON config entries (e.g., OPENFINCLAW_API_KEY / apiKey), which means an agent automating configuration would need to handle and output secret values directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata