gws-installer
Fail
Audited by Snyk on Jul 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill asks the user to paste the OAuth Client ID and Client Secret into the conversation and instructs replacing placeholders with those exact values in exported env var commands, which requires the LLM to receive and reproduce secrets verbatim in its output.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata