skills/badhope/skill/code-search/Snyk

code-search

Fail

Audited by Snyk on Mar 31, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill's search results include a 'match' string and the findSecurityIssues patterns explicitly match literal passwords/api keys (e.g., /password\s*=\s*['"][^'"]+['"]/), which implies returning those secret values verbatim in outputs.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Mar 31, 2026, 06:58 AM

Issues

1