skills/cloudzun/vibe-working-experiments/knowledge-searcher/Snyk

knowledge-searcher

Fail

Audited by Snyk on Jun 23, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 0.80). The skill mandates verbatim excerpts from knowledge-base documents as "相关原文", so if any of those documents contain API keys, tokens, passwords or other secrets the agent must include them verbatim in its output, enabling secret exfiltration.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Jun 23, 2026, 11:53 AM

Issues

1

Security Audit — snyk — knowledge-searcher