review-script
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill asks the agent to read scripts and include code snippets / "current problematic code" and copy-paste quick fixes in its report, which can require echoing any hardcoded secrets found in those files and thus creates an exfiltration risk.
Audit Metadata