recipe-generalization-sweep

Fail

Audited by Snyk on Jul 11, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The recipe explicitly requires recording and emitting verbatim quotes from files as evidence (e.g., "file:line + verbatim quote" and including those quotes in the written solution_outline), which forces the LLM to read and output exact repository text and could exfiltrate any secrets present there.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 11, 2026, 07:12 AM
Issues
1
Security Audit — snyk — recipe-generalization-sweep