cuihuo
Fail
Audited by Snyk on Jul 26, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt explicitly instructs the agent to forward the user's raw input unchanged to downstream skills, which will cause any secrets (API keys, passwords, tokens) present in that input to be handled and emitted verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata