text-splitter
Fail
Audited by Snyk on Feb 19, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The tool outputs verbatim text chunks (content previews) from arbitrary input, so if the input contains API keys, tokens, or passwords the model will reproduce them in its output, enabling secret exfiltration.
Audit Metadata