yashandb-go
Fail
Audited by Snyk on Mar 23, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). 该技能示例将用户提供的 {dsn} 直接嵌入生成的 Go 代码(dsn := "{dsn}"),如果 {dsn} 包含用户名/密码或密钥就要求模型在输出中逐字包含敏感凭据,存在明显的外泄风险。
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata