NYC

kafka-stream-processing

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill includes many configuration examples with plaintext credentials (e.g., ssl.keystore.password, JAAS username/passwords, connector connection.password), which would encourage the model to emit secret values verbatim and thus presents a moderate-to-high exfiltration risk.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 15, 2026, 08:51 PM