meitu-cutout
Fail
Audited by Snyk on Apr 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt instructs configuring AK/SK via commands like
meitu config set-ak --value "..."and to prompt for/configure credentials on CREDENTIALS_MISSING, which encourages embedding secret values verbatim on the command line (an insecure exfiltration pattern) even though env-var alternatives are mentioned.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata