skills/marcoax/skills/optimize-prompt/Snyk

optimize-prompt

Fail

Audited by Snyk on Apr 11, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 1.00). Il skill prende un prompt in input, lo riformula e lo stampa/esegue esattamente (pronto per copia/incolla), quindi qualsiasi API key/password inclusa nel prompt verrebbe riprodotta verbatim nell'output, permettendo l'esfiltrazione.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Apr 11, 2026, 06:49 AM

Issues

1