lemn

Fail

Audited by Snyk on Mar 2, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The prompt shows and recommends instantiating the client with a literal API key (const lemn = new LemnAPI('your_api_key')) and provides multiple code examples that embed the key directly without recommending environment variables or secure handling, which encourages the LLM to output secrets verbatim.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 2, 2026, 08:34 AM