skills/kalshamsi/claude-security-skills/mobile-security/Snyk

mobile-security

Fail

Audited by Snyk on Apr 15, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The prompt includes explicit hardcoded API keys/tokens in unsafe example snippets and instructs the skill to generate/record UNSAFE patterns (code snippets and locations), which encourages outputting secrets verbatim and therefore creates an exfiltration risk.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Apr 15, 2026, 06:09 PM

Issues

1