prisma-postgres-setup

Fail

Audited by Snyk on Apr 2, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly tells the agent to accept service tokens pasted into the chat or extracted from the user's prompt and to "use it exactly as provided" — embedding them verbatim in Authorization headers, shell variables, curl commands, and writing direct connection strings into .env — which forces the LLM to handle/output secrets directly.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 2, 2026, 09:56 AM
Issues
1