postgresql

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The prompt includes explicit plaintext credentials and password values in commands and config examples (e.g., POSTGRES_PASSWORD=password, CREATE ROLE ... PASSWORD 'secure_password', primary_conninfo with password=...), which would require the LLM to emit secret values verbatim in generated outputs.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo commands, installing packages, starting/enabling systemd services, and editing system configuration files under /etc (all privileged system-level changes), so it directs actions that modify the machine's state and require elevated privileges.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 15, 2026, 08:57 PM