ai-auditing-code
Fail
Audited by Snyk on May 8, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill asks the agent to read user-provided code and include verbatim code excerpts in the audit report (Before/After code blocks) without instructing redaction, so any hardcoded API keys, tokens, or passwords in those files would be output directly (exfiltration risk).
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata