leapcat-auth
Fail
Audited by Snyk on Mar 31, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to prompt the user for OTP/trade-password values and then embed them verbatim into CLI commands (e.g., --otp-code ), which requires the LLM to output secret values directly and creates an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata