diagram-creator
Fail
Audited by Snyk on Mar 6, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill auto-ingests config files including .env and instructs extracting "relevant metadata" (IPs, ports, roles, etc.) into the generated, self-contained HTML without any redaction guidance, which would require embedding secret values (API keys, tokens, passwords) verbatim in the output.
Audit Metadata