testing-api-authentication
Fail
Audited by Snyk on Apr 9, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly shows and requires using real Clerk secrets and JWTs (e.g., CLERK_SECRET_KEY=sk_test_..., CLERK_PEM_PUBLIC_KEY, and running commands with "<JWT_TOKEN>"), which forces the agent to handle and embed secret/token values verbatim in commands or files.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata