sparkscan-ios

Fail

Audited by Snyk on Oct 22, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs the agent to obtain a secret license key via tool calls or user input and write it directly into the source code ("put the key into the code: write it into the licence-key call in place of the placeholder"), which exposes the secret in the output and context.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Oct 22, 2026, 10:57 PM
Issues
1