gitops-master

Fail

Audited by Snyk on Mar 13, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill asks the user to provide a kubectl access string (SSH/proxy command) and then requires embedding ${SSH_CMD} verbatim in every generated shell command, so any credentials/tokens included in that string would be echoed by the LLM — creating an exfiltration risk.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 13, 2026, 02:48 PM
Issues
1