sync-docs
Fail
Audited by Snyk on Apr 19, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to extract variable definitions and default values from variables.tf and embed them verbatim into documentation and example config files (including sensitive names like hetzner_token and ssh_*), which would cause secrets to be output if defaults contain credentials.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata