swiftui-preview

Fail

Audited by Snyk on Jun 22, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill requires embedding the generated Swift source (which may contain any user-provided secrets) into a shell command via base64 and passing it to emacsclient, so any secrets in the context would be included verbatim in the command and could be exfiltrated.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This skill deliberately compiles and executes arbitrary Swift source supplied by the caller (delivered via base64), which grants remote code execution on the host and can be used for data exfiltration, credential theft, or other backdoor/system-compromise actions.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 22, 2026, 04:25 AM
Issues
2
Security Audit — snyk — swiftui-preview