sparkscan-kmp
Fail
Audited by Snyk on Oct 22, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to retrieve a Scandit license key via an MCP tool and then write it directly into the source code in place of a placeholder, which involves handling and embedding a secret value into generated code.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata