clerk-install-auth

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The prompt instructs creating a .env.local by embedding NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY directly (via a here-doc), which implies inserting real secret values verbatim into files/commands and therefore requires the LLM to handle/output secrets.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 23, 2026, 06:30 AM
Issues
1