Database Seeding
Fail
Audited by Snyk on Aug 16, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes hardcoded plaintext passwords (e.g., "admin123!") embedded in seeder code and documentation, which would require the LLM to include secret values verbatim in generated output—an insecure secret-handling pattern.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 0.90). High-risk: the docs show Core seeders (invoked unconditionally) create an admin user with a hardcoded, well-known password ("admin123!"), effectively introducing a backdoor/credential risk in production; no network exfiltration or obfuscated payloads were found.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata