wechat-publisher
Fail
Audited by Snyk on Feb 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to collect APP_ID and APP_SECRET (optionally from the user) and to update/write them into config.json, which requires the LLM to handle and output those secret values verbatim.
Audit Metadata