context-agent
Fail
Audited by Snyk on Apr 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). This skill automatically captures and persists full session messages, tool calls and results into ACTIVE_CONTEXT.md and MEMORY.md which are then loaded into the system prompt, so any API keys, tokens or passwords present in sessions would be stored and reintroduced verbatim into future outputs, creating high exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata