moai-ref-owasp-checklist
Fail
Audited by Snyk on Jul 30, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The checklist explicitly asks to "show grep results for common secret patterns" and references secrets in source code, which could require the agent to display secret values verbatim if any matches are found.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata