mysql
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt embeds plaintext passwords (e.g., CREATE USER ... IDENTIFIED BY 'secret' and MASTER_PASSWORD='secret') and demonstrates placing credentials directly into commands/configs, which requires or encourages outputting secret values verbatim.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs installing mysql-server and running mysql_secure_installation and shows edits to /etc/mysql/mysql.conf.d/mysqld.cnf (system files), which require elevated privileges and modify the machine's state.
Audit Metadata