dynamic-debugger
Fail
Audited by Snyk on Feb 26, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly inspects memory, environment variables, and local variables and displays their values (e.g., "show all local variables" / "inspect variable X"), which can cause the LLM to output secrets verbatim from the debugged process.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). Flagged: the skill explicitly requires full filesystem read/write and starts debugger processes with full system permissions (able to read/modify any file and attach to processes), which can change machine state and expose sensitive data even if it doesn't explicitly request sudo or creating users.
Audit Metadata