aps-doc-ingestion

Fail

Audited by Snyk on Mar 31, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill mandates extracting "real, extracted data" and "working examples from actual configs" (including connection parameters, JDBC strings, service account files and credential references) from code/config files, which can require the LLM to include secret values verbatim and thus poses a high secret-exfiltration risk despite a note saying "WITHOUT exposing secrets".

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 31, 2026, 06:55 AM
Issues
1
Security Audit — snyk — aps-doc-ingestion