iblai-vibe-auth
Fail
Audited by Snyk on Jul 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read PLATFORM and TOKEN from iblai.env and to include the TOKEN verbatim in curl commands and Authorization headers for API calls, which requires the LLM to handle/output secret values directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata