agency-digest-setup
Fail
Audited by Snyk on Feb 28, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt asks the agent to collect user Slack webhook URLs and Intelligems API keys and to write them directly into files like brands.json and .env, which requires the LLM to handle and output secret values verbatim.
Audit Metadata