smoke-test
Fail
Audited by Snyk on Jun 13, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The smoke-test instructions explicitly tell the agent to discover env/credentials from the repo and to "capture exactly what you sent" when issuing real requests, which can force the LLM to read and reproduce secret values (API keys/tokens) verbatim in commands/reports — an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata