skills/jayden-dang/skills/code-review/Snyk

code-review

Fail

Audited by Snyk on Jul 26, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill instructs subagents to read and quote git diffs/commit hunks and report security issues crossing trust boundaries, which can force the model to reproduce secret values (API keys, tokens, passwords) verbatim if they appear in the diff.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Jul 26, 2026, 10:10 AM

Issues

1

Security Audit — snyk — code-review