case-feedback-skill

Fail

Audited by Snyk on Feb 24, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill requires appending the original, complete conversation history into a command-line argument and running a script, which forces the agent to include any secrets present in the conversation verbatim in its output/command invocation, creating a direct exfiltration risk.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 24, 2026, 02:47 AM