matrixscan-ar-net-android

Fail

Audited by Snyk on Oct 22, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the LLM to take an API/license key obtained from an MCP tool or user input and write it directly into the source code, violating secret management best practices by embedding credentials verbatim instead of using environment variables.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Oct 22, 2026, 10:57 PM
Issues
1