graphiti

Fail

Audited by Snyk on Feb 21, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The prompt contains multiple examples that place API keys and passwords inline (e.g., os.environ["OPENAI_API_KEY"] = "your-key", docker run -e NEO4J_AUTH=neo4j/password, client initializations with api_key="your-api-key"), which encourages embedding secrets verbatim in code/commands and therefore requires the LLM to handle/output secret values directly.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 21, 2026, 01:44 AM