ship-hero
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt contains examples that embed credentials directly (curl with email/password and Authorization: Bearer YOUR_ACCESS_TOKEN) and tells the user to save webhook shared_signature_secret, so an agent using it would be expected to handle or emit secret values verbatim.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill consumes and processes external, user-generated data from ShipHero's public GraphQL API (https://public-api.shiphero.com/graphql) and incoming webhook payloads (references/webhooks.md), including customer/order/product fields that the agent is expected to read and act on, which could carry indirect prompt-injection content.
Audit Metadata