add-mcp
Fail
Audited by Snyk on Apr 3, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). This skill asks for admin and bearer/API tokens (LITELLM_API_KEY and MCP "credentials") and shows curl commands and JSON that embed those secrets verbatim in headers and payloads, requiring the agent to output secrets directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata