dividend-growth-pullback-screener
Fail
Audited by Snyk on Jun 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt primarily recommends secure env-var usage but explicitly includes examples and an option to supply API keys as command-line arguments (e.g., --fmp-api-key YOUR_FMP_KEY), which instructs embedding secret values verbatim into commands and outputs, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata