dayapp-mobile-push
Fail
Audited by Snyk on Mar 9, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill tells the agent to read a deviceid from config.json and include it in the GET request (i.e., embed a secret identifier into generated requests/commands), requiring the model to handle/output the secret verbatim.
Audit Metadata