update-key
Fail
Audited by Snyk on Apr 3, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). This prompt explicitly asks the agent to collect an
sk-...API key from the user and to include it verbatim in Authorization headers and in the JSON payload for curl POST requests, requiring the LLM to handle and output secrets directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata