kugelaudio
Fail
Audited by Snyk on Jun 30, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt instructs the agent to use the connector-provided API key in Authorization headers (shown in a curl command), which requires reading and inserting the secret into requests or generated commands and thus risks exfiltration.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata