codex-advisor
Fail
Audited by Snyk on Apr 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt instructs the agent to read arbitrary files/git diffs and to "completely display" Codex's feedback without filtering, so any secrets present in those inputs (API keys, tokens, passwords) could be returned verbatim and exposed.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata