code-review
Fail
Audited by Snyk on Jun 26, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt requires quoting problematic code and explicitly asks to "trace the sensitive value from source to observable sink" as proof, which can force the model to include secret values verbatim in its output (high exfiltration risk).
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata