session-persistence

Fail

Audited by Snyk on Mar 21, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill ingests and returns raw message content (search snippets, conversation dumps) verbatim into a local DB, so it can cause the LLM to output any secrets contained in user messages even though it doesn't explicitly request keys.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 21, 2026, 05:55 AM
Issues
1