scratch
Fail
Audited by Snyk on Apr 2, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly requires storing user-provided text "verbatim" and displays those items in the
/scratch listoutput, so if a user pastes API keys, tokens, or passwords the LLM will output them exactly, creating a direct secret-exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata