dream
Fail
Audited by Snyk on May 18, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill reads raw conversation JSONL and prints/inserts message content into Sibyl (a networked store) without instructing redaction, so any API keys, tokens, or passwords present in conversations could be copied verbatim and exfiltrated.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata