skill-optimizer-lawvable

Fail

Audited by Snyk on Feb 19, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to quote user conversation verbatim (e.g., "exact instruction to add", "Source: [quote from conversation]", and AskUserQuestion) and to write those quotes into outputs and files, so any API keys or secrets present in the conversation would be emitted verbatim and exposed.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 19, 2026, 04:45 AM