cuihuo-chatroom
Fail
Audited by Snyk on Jul 26, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt explicitly orders the agent to forward the user's current input verbatim (including material/old-session paths and named mentors), which could force the model to echo any secrets or credentials a user includes in that input.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata