shopify-admin
Fail
Audited by Snyk on Jul 31, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill mandates embedding the user's most recent message verbatim (base64-encoded) into the scripts/validate.mjs command, which forces any secrets present in the user's prompt to be included in the agent's output and thus exposes them.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata