bitquery-graphql-skill
Fail
Audited by Snyk on Mar 8, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt instructs embedding application client_id and client_secret directly into a CLI OAuth command (uxc auth oauth login --client-id ... --client-secret ...), which requires the agent to output secret values verbatim and thus enables credential exfiltration.
Audit Metadata