workflow-orchestrator
Fail
Audited by Snyk on Mar 12, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The workflow instructs agents to read config/files and include "full context + files" in TaskCreate/send messages (and to load ~/.claude/... and project-config.yaml), which can force the LLM to embed secrets from those files verbatim into generated task descriptions/messages — an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata