zhihu-copy-rewriter
Fail
Audited by Snyk on May 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill mandates emitting a command-line invocation python scripts/rewrite.py "<文案内容>" that includes the user's input verbatim, so if that input contains secrets (API keys, tokens, or passwords) they would be reproduced in the LLM's output/command line, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata