NYC

browser-automation

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to perform automated login steps (browser_type → Enter password / Enter email) which requires the agent to accept and emit the user's credentials verbatim in its automation commands, exposing secrets.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 15, 2026, 10:35 PM