write-meeting-notes

Fail

Audited by Snyk on Apr 30, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill reads ~/.datamktkorea/config.json to extract notion_token and DB IDs and then constructs and outputs curl commands and payloads that embed the notion_token and DB/page IDs verbatim (e.g., Authorization: Bearer {notion_token}), which requires the LLM to handle and emit secrets directly.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 30, 2026, 08:33 AM
Issues
1