project-documentation-workflow

Fail

Audited by Snyk on Apr 6, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The workflow instructs agents to scan project files and obligatorily emit structured "discoveries" and task findings (including config_found.default_value and key_discoveries) into NDJSON/CSV outputs without any masking, which can force inclusion of secrets found in source/config files verbatim.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 6, 2026, 11:08 AM
Issues
1