pp-whoop

Fail

Audited by Snyk on May 9, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The prompt explicitly shows storing an access token via a command-line invocation ("whoop-pp-cli auth set-token YOUR_TOKEN_HERE"), which requires embedding the secret as a literal CLI argument (an explicit high-risk pattern for secret exposure), even though an env-var option is also mentioned.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
May 9, 2026, 09:40 PM
Issues
1