api-provider-setup

Fail

Audited by Snyk on Feb 20, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill's templates and instructions require placing API keys directly into the JSON config (apiKey fields) and would lead an agent to accept and embed secret values verbatim into generated config or commands.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 20, 2026, 05:34 PM