things-mac
Fail
Audited by Snyk on Jul 2, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt includes examples and update commands that pass an auth token directly on the command line (e.g., --auth-token ), which would require the LLM to handle and potentially output secret values verbatim if real tokens are used.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata