openstack-backup

Fail

Audited by Snyk on Jun 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.85). The prompt contains multiple insecure patterns (inline passwords like MYSQL_ROOT_PASSWORD=testpass and mysql -u root -ptestpass, explicit --password=${DB_ROOT_PASSWORD} usage, and references to passwords.yml and passphrase files) that would encourage or require placing secret values verbatim into generated commands or scripts, creating an exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the prompt contains explicit system-level operations (mkdir/chown/chmod under /opt, writing /etc/cron.d, cp from /etc, using /root/.backup-passphrase, kolla-ansible deploy/bootstrap, docker exec and mariabackup, openstack commands) that require elevated/sudo privileges and will modify the host's system state and sensitive configuration data.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 27, 2026, 04:57 AM
Issues
2
Security Audit — snyk — openstack-backup