enhance-prompt
Fail
Audited by Snyk on Jul 8, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly preserves and returns an expanded_prompt derived from the user's raw_input (preserving the user's wording) and the output schema includes that expanded_prompt, so if a user supplies secrets (API keys, tokens, passwords) the skill will reproduce them verbatim in its output; the document only warns hosts about storage and does not require redaction, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata