dev-test-hammerspoon

Fail

Audited by Snyk on Jun 22, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The provided E2E example reads the system clipboard and concatenates/prints its contents into test output (print("Clipboard verified: " .. clipboard)), which forces any clipboard data — potentially secrets like API keys or passwords — to appear verbatim in logs/screenshots, creating an exfiltration risk.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 22, 2026, 06:30 AM
Issues
1
Security Audit — snyk — dev-test-hammerspoon