exasol-bucketfs

Fail

Audited by Snyk on Mar 10, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill tells the agent to ask the user for passwords and to help create ~/.exapump/config.toml (which contains plaintext passwords) and documents CLI flags like --bfs-write-password, requiring the LLM to emit secret values verbatim in configs or commands.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 10, 2026, 03:49 AM