readme-writer
Fail
Audited by Snyk on Jul 3, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt explicitly urges "Use real examples" and lists environment variables and edit- .env instructions (e.g., API_KEY, ANTHROPIC_API_KEY), which encourages embedding actual API keys or secrets verbatim in generated README content and thus creates an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata