graphiti
Fail
Audited by Snyk on Feb 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt contains multiple examples that place API keys and passwords inline (e.g., os.environ["OPENAI_API_KEY"] = "your-key", docker run -e NEO4J_AUTH=neo4j/password, client initializations with api_key="your-api-key"), which encourages embedding secrets verbatim in code/commands and therefore requires the LLM to handle/output secret values directly.
Audit Metadata