skill-doctor
Fail
Audited by Snyk on Jul 14, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill mandates reading entire SKILL.md and referenced files and populates report fields like "Actual: {what was found}" and JSON "fails"/descriptions, which can force the LLM to include verbatim file contents (including any embedded API keys/secrets) in its output.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata