request-fulfillment

Fail

Audited by Snyk on Apr 29, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to query and document request variables (item_option_new.value / variables) and to "record what was specifically requested," which can include sensitive secrets (passwords, API keys) and therefore may require the LLM to output those values verbatim.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 29, 2026, 04:35 PM
Issues
1