moodle-external-api-development

Fail

Audited by Snyk on Jul 28, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill includes curl examples that embed a plaintext password and an API token directly on the command line (e.g., -d "password=yourpassword" and -d "wstoken=YOUR_TOKEN"), which requires handling secret values verbatim and risks exfiltration.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 28, 2026, 05:46 AM
Issues
1
Security Audit — snyk — moodle-external-api-development