skills/woohyun212/security-skill/encoding-toolkit/Snyk

encoding-toolkit

Fail

Audited by Snyk on May 9, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). This skill automatically decodes and prints input strings (including JWTs and their signature/payload) verbatim, so if the INPUT contains API keys, bearer tokens, cookies, or passwords the secret values will be output directly—posing an exfiltration risk.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

May 9, 2026, 02:07 AM

Issues

1

Security Audit — snyk — encoding-toolkit