cc-analytics
Fail
Audited by Snyk on Jun 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The script reads ~/.claude/history.jsonl and directly includes git remote URLs in the generated HTML without redaction, so any embedded credentials or tokens in remotes (or secrets present in history entries) would be output verbatim, posing a clear secret-exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata