sql-explainer
Fail
Audited by Snyk on May 14, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). It requires embedding the user's SQL query verbatim into the run_js JSON payload (even if truncated), so any secrets present in the query (API keys, tokens, passwords) would be included in the LLM output and can be exfiltrated.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata