skill-contract-reviewer
Fail
Audited by Snyk on Aug 24, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly requires showing the "exact resolved argument vector" and "exact argv" as execution evidence, which would force the model to emit any secret values present in command-line arguments verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata