pin
Fail
Audited by Snyk on Apr 2, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). Because the skill explicitly stores and echoes user-provided text verbatim to a persistent JSON file and returns it in a one-line pin response, any API keys/passwords or tokens a user utters would be recorded and emitted, creating a direct exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata