code-review
Fail
Audited by Snyk on Feb 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill requires including "Current code" snippets from reviewed files (and suggests fixes) which forces the model to read and potentially output secrets embedded in code verbatim, creating an exfiltration risk.
Audit Metadata