Fail
Audited by Snyk on Aug 14, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes hard-coded passwords in both a command-line example (
qpdf --password=mypassword ...) and a code example (writer.encrypt("userpassword", "ownerpassword")), which requires the LLM to handle or reproduce secret values verbatim and is therefore insecure.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata