figure-out-team

Fail

Audited by Snyk on Jul 31, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). This skill tells the agent to forward user-provided arguments "exactly as given" and invoke another skill with "$ARGUMENTS", which forces the LLM to reproduce any embedded secret values verbatim (risking exfiltration).

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 31, 2026, 09:52 AM
Issues
1
Security Audit — snyk — figure-out-team