skills/msaad00/cloud-ai-security-skills/ingest-k8s-audit-ocsf/Snyk

ingest-k8s-audit-ocsf

Fail

Audited by Snyk on Apr 20, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill explicitly preserves raw requestObject/responseObject and raw objectRef verbatim into output (unmapped.k8s.*), so if audit entries contain secret values (e.g., secret data in response bodies) the LLM must copy those secret values into generated JSON, creating an exfiltration risk.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Apr 20, 2026, 01:17 AM

Issues

1

Security Audit — snyk — ingest-k8s-audit-ocsf