forgejo-cli-ops
Fail
Audited by Snyk on Sep 22, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the user to store a PAT value using
echo -n "<PAT_VALUE>", which encourages handling raw secret values directly in commands or context.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Reading Forgejo issues and pull requests via the CLI allows ingestion of outsider-authored free text.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata