webhook-setup

Fail

Audited by Snyk on Aug 17, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill asks the user for a "verify token" and explicitly instructs the agent to pass that token (a secret) verbatim to the devtools_webhook_manage action, which requires the LLM to handle/output the secret directly.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Aug 17, 2026, 05:03 AM
Issues
1