slurm
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt explicitly shows and instructs adding tokens via inline export lines (e.g., export HF_TOKEN=your_huggingface_token_here, export WANDB_API_KEY=...), telling users to replace placeholders with real secrets in job scripts, which encourages embedding secrets verbatim and creates an LLM exfiltration risk.
Audit Metadata