ln-004-agent-config-sync
Fail
Audited by Snyk on Mar 10, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly reads the mcpServers/env blocks from local Claude settings and writes/merges them into Gemini/Codex config files, which requires reproducing any API keys, bearer tokens, or other secret values found there verbatim in the generated config output.
Audit Metadata