NYC

sentry-create-alert

Fail

Audited by Snyk on Feb 18, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly asks for an auth token and provides curl examples that embed "Authorization: Bearer {token}" (and shows token examples), which instructs the agent to solicit and include secret API tokens verbatim in generated commands/outputs.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 18, 2026, 02:07 AM