git-commit-review

Fail

Audited by Snyk on Mar 4, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to run and display diffs and full commit previews (e.g., git diff, git diff --cached, show full commit), which can contain secret values verbatim, so the LLM may read and output secrets directly.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 4, 2026, 06:25 AM