prompt-engineer
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill mandates always displaying the complete prompt text verbatim, which would force the model to echo any embedded API keys, tokens, or passwords present in prompts and thus enables secret exfiltration.
Audit Metadata