authenticating-taubyte-cli

Fail

Audited by Snyk on May 3, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly shows passing a GitHub PAT as a direct CLI argument (tau login --token <github_token>) and instructs reading the token from ~/tau.yaml into a shell variable and embedding it verbatim in curl Authorization headers, which requires exposing the secret in commands/outputs.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
May 3, 2026, 01:45 PM
Issues
1