postgresql
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes explicit plaintext credentials and password values in commands and config examples (e.g., POSTGRES_PASSWORD=password, CREATE ROLE ... PASSWORD 'secure_password', primary_conninfo with password=...), which would require the LLM to emit secret values verbatim in generated outputs.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo commands, installing packages, starting/enabling systemd services, and editing system configuration files under /etc (all privileged system-level changes), so it directs actions that modify the machine's state and require elevated privileges.
Audit Metadata