apideck-connector-coverage
Fail
Audited by Snyk on Feb 23, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt contains REST and fetch examples that embed Authorization and app-id headers (e.g., curl -H 'Authorization: Bearer {API_KEY}' and Authorization:
Bearer ${apiKey}), which encourage inserting real API keys or app IDs verbatim into generated commands/requests even though some SDK examples use env vars.
Audit Metadata