competition-oauth-oidc-chain
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt explicitly requires recording and reproducing claim-bearing tokens, PKCE verifiers, codes, and other auth artifacts and producing replayable redirect-to-acceptance sequences, which forces the LLM to handle and potentially output secret values verbatim.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata