eval-hooks
Fail
Audited by Snyk on Aug 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly extracts and displays hook command strings and reads local scripts to show/check them in interactive reports, so any embedded secrets (API keys, tokens, or passwords) in settings or scripts would be read and emitted verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata