mysql-tools

Fail

Audited by Snyk on Mar 6, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). This skill explicitly accepts and demonstrates passing the database password as a command-line argument (e.g., --password YOUR_PASSWORD), which encourages embedding secret values verbatim in generated commands or scripts and thus requires the LLM to handle/output secrets directly.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 6, 2026, 04:13 PM