newman-script-helper
Fail
Audited by Snyk on Apr 24, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill generates concrete CLI commands and explicitly includes patterns that embed secrets (Postman API URL with ?apikey=... and inline --env-var/--global-var "KEY=value"), so the agent may need to insert secret values verbatim into its output, creating exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata