skills/open-edge-platform/skills/metro-ai-apps-recipe/Snyk

metro-ai-apps-recipe

Fail

Audited by Snyk on Aug 25, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). The skill requires substituting template variables (including TURN_USER/TURN_PASS and default credentials) into generated files like .env and README, which forces the LLM to emit secret/password values verbatim into its output.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Aug 25, 2026, 12:05 AM

Issues

1

Security Audit — snyk — metro-ai-apps-recipe