add-seed-skills
Fail
Audited by Snyk on Jul 11, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill instructs embedding the production DATABASE_URL directly into shell commands (export DATABASE_URL='...') and to pull the prod env file, which would require an agent to handle or output the secret verbatim.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs pulling production env secrets and exporting a production DATABASE_URL then running
pnpm ... db:seed, which directs the agent to modify live production data and local environment files (a high-risk state change).
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata