skills/mrzhangguoguo/oh-my-workbuddy/configure-notifications/Snyk

configure-notifications

Fail

Audited by Snyk on Jul 29, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill asks the agent to prompt for webhook URLs, bot tokens and optional headers and then write them into a config file (and show commands), which requires embedding secret values verbatim in outputs/configs.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Jul 29, 2026, 03:29 PM

Issues

1