competition-prompt-injection

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). 该技能明确要求“记录/保留...最终工具参数、文件路径或暴露的秘密表面”,并追踪何时文本成为“秘密请求”,这会促使模型在输出中包含或重现秘密值,属于高风险明文凭证处理。

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 20, 2026, 03:17 AM
Issues
1
Security Audit — snyk — competition-prompt-injection