pp-whoop
Fail
Audited by Snyk on May 9, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt explicitly shows storing an access token via a command-line invocation ("whoop-pp-cli auth set-token YOUR_TOKEN_HERE"), which requires embedding the secret as a literal CLI argument (an explicit high-risk pattern for secret exposure), even though an env-var option is also mentioned.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata