rsvp-reading
Fail
Audited by Snyk on May 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). This skill reads arbitrary documents and explicitly outputs verbatim token previews (first 5 tokens) and generated token streams, so any secrets contained in the input file (API keys, tokens, passwords) would be emitted by the agent, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata