skills/brojonat/llmsrules/playwright-e2e/Snyk

playwright-e2e

Fail

Audited by Snyk on Apr 18, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 0.90). The prompt hardcodes a SECRET_KEY ("e2e-test-secret") in config and shows calling getAdminJWT with that literal secret and embedding tokens/JWTs in requests, which instructs the agent to include secret values verbatim in generated test code (an exfiltration risk).

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Apr 18, 2026, 06:43 AM

Issues

1