form-8995-a
Fail
Audited by Snyk on Jun 18, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). This skill explicitly requires the agent to embed user-supplied sensitive identifiers (SSN/ITIN, EIN) and other private tax data verbatim into the generated Form 8995‑A draft, which forces the LLM to handle and output secrets directly and creates exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata