ralph-loop
Fail
Audited by Snyk on Aug 19, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to write the user's task prompt verbatim into a persistent state file and to confirm/echo the prompt when activating the loop, which forces the LLM to handle and potentially output any secrets contained in the prompt.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata