owasp-audit
Fail
Audited by Snyk on Jul 8, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The audit explicitly directs grepping for and documenting hardcoded secrets (e.g., "Hardcoded secrets, API keys, or passwords") and requires including "Vulnerable Code" snippets, which would force the LLM to reproduce secret values found in source verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata