NYC

test-automation

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The prompt's generated test files include hard-coded plaintext passwords (e.g., 'ValidP@ssw0rd', 'SecureP@ss123') and instruct creating tests that embed those secrets verbatim, which requires the LLM to output secret-like values directly.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 15, 2026, 09:37 PM