meeting-note
Fail
Audited by Snyk on Jul 1, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly requires embedding the stage's fenced JSON from transcript.jsonl verbatim into notes.md ("no silent rewrites") and reads per-agent private memory files, which could force the model to reproduce any API keys or secrets present in those files.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata