second-opinion
Fail
Audited by Snyk on Apr 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill reads the full document (and optional SKILL.md files) into a combined prompt saved to /tmp and pipes it to the external gemini CLI, so any secrets present in those files would be included verbatim in the request to Gemini (exfiltration risk).
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata