skills/badhope/skill/claude-api/Snyk

claude-api

Fail

Audited by Snyk on Mar 31, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The prompt's example code directly embeds an API key (client = Anthropic(api_key="your-api-key")), encouraging placing secrets in generated code or outputs and thus risking the LLM asking for or outputting real keys verbatim.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Mar 31, 2026, 06:59 AM

Issues

1