testing-api-authentication

Fail

Audited by Snyk on Apr 9, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly shows and requires using real Clerk secrets and JWTs (e.g., CLERK_SECRET_KEY=sk_test_..., CLERK_PEM_PUBLIC_KEY, and running commands with "<JWT_TOKEN>"), which forces the agent to handle and embed secret/token values verbatim in commands or files.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 9, 2026, 09:56 PM
Issues
1