diagnosing-failed-warehouse-syncs
Fail
Audited by Snyk on Apr 27, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly asks users to paste API keys/secrets and shows agent calls that embed those secrets verbatim into tool payloads (e.g., external-data-sources-partial-update with job_inputs: {stripe_secret_key: "sk_live_..."} and update-webhook-inputs-create with signing_secret), so the LLM would need to handle and output secret values directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata