skills/arenukvern/mcp_flutter/flutter-mcp-toolkit-debug/Snyk

flutter-mcp-toolkit-debug

Fail

Audited by Snyk on May 12, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to embed full debug WebSocket URIs (including a placeholder obtained from app.debugPort.wsUri) into tool calls, which requires the LLM to handle and output secret tokens verbatim (exfiltration risk).

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

May 12, 2026, 12:42 AM

Issues

1

Security Audit — snyk — flutter-mcp-toolkit-debug