cargo-cli-analytics
Fail
Audited by Snyk on Mar 30, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt's examples instruct passing an API token directly on the command line (cargo-ai login --token ), which encourages embedding secrets verbatim in generated commands and thus risks secret exfiltration.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata