sqlplan-review
Fail
Audited by Snyk on May 7, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill instructs the model to reproduce the full StatementText and parameter values verbatim (including ParameterCompiledValue/ParameterRuntimeValue) from user-provided .sqlplan XML, which can contain sensitive literals (passwords, connection strings, API keys) and thus forces secrets to appear in the agent's output.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata