refactor-module
Fail
Audited by Snyk on May 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly requires reading .plain files and copying functional specs verbatim into new module files (no rewording), so if those files contain API keys, tokens, or passwords the LLM would be forced to reproduce those secret values in its output, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata