space-ai-article-illustration
Fail
Audited by Snyk on Jul 13, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The Gemini example passes an API key via a command-line flag (--api-key "GEMINI_API_KEY"), which would require the LLM to insert secret values verbatim into generated commands (an exfiltration risk), even though LabNana keys are noted as stored in .labnana.env.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata