indices-auth

Fail

Audited by Snyk on Mar 14, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The prompt includes an explicit insecure example of passing an API key as a command-line argument (indices login --api-key "<api-key>"), which could require the LLM to insert secrets verbatim even though a secure prompt option is mentioned.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 14, 2026, 07:51 PM
Issues
1