basecamp-doctor
Fail
Audited by Snyk on Oct 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill prompt explicitly instructs the agent to read secrets from 1Password using
op readand pipe them directly into CLI login commands, which exposes the secrets to the LLM context and output handling.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata