e2e-tester
Fail
Audited by Snyk on Feb 18, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes explicit credential values (e.g., httpCredentials with "e2euser:very-secret" and RP_BOOTSTRAP_USER set to 'e2euser:very-secret') and instructs embedding them in test code/config, which requires the LLM to output secret values verbatim—an insecure pattern.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill starts a required Redpanda container at runtime using the external image reference "redpandadata/redpanda:v25.2.1" (pulled from a registry via Testcontainers), which constitutes fetching and executing remote code in the test runtime.
Audit Metadata