booking-config
Fail
Audited by Snyk on Oct 13, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to retrieve an API key using 1Password CLI into a shell variable and then include it as a query parameter in curl requests (
apiKey=$CALCOM_API_KEY). This passes the secret through the execution context and exposes it in command arguments, creating an insecure credential handling risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata