cs-crypto
Fail
Audited by Snyk on Mar 5, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt includes concrete examples that hard-code secret key values (e.g., literal AES keys in Python snippets and explicit export/use of SERVICE_API_KEY), which encourages embedding or echoing secrets verbatim in generated code/commands even though some secure patterns are mentioned.
Audit Metadata