finalize-step-sync-plugin-cache

Fail

Audited by Snyk on Jul 11, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The step explicitly directs the agent to embed the engine's summary_message verbatim into a command-line argument (--display-detail), which forces any content produced by the engine (including potential secrets) to be included in the agent's output.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 11, 2026, 07:12 AM
Issues
1
Security Audit — snyk — finalize-step-sync-plugin-cache