tools-email
Fail
Audited by Snyk on Mar 8, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt includes an explicit insecure pattern—embedding the Resend API key as a literal CLI argument in the .cursor/mcp.json command (and shows API key placeholders), which would require inserting the actual secret verbatim into generated config/commands and thus risks exfiltration.
Audit Metadata