expertapp-receptionist

Fail

Audited by Snyk on Jul 24, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill asks the user for an API key and requires it be sent as an "Authorization: Bearer " header (and shows that header), which forces the agent to handle and embed the secret in requests and therefore risks verbatim secret exposure.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 24, 2026, 10:48 AM
Issues
1
Security Audit — snyk — expertapp-receptionist