Skip to main content

credentials

Manages and secures API credentials for trading platforms using AES-256-GCM encryption, ensuring safe access and storage.

Install this skill

or
69/100

Security score

The credentials skill was audited on Feb 19, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 127

Template literal with variable interpolation in command context

SourceSKILL.md
127console.log(`API Key: ${polymarketCreds.apiKey}`);
medium line 133

Template literal with variable interpolation in command context

SourceSKILL.md
133console.log(`Configured: ${platforms.join(', ')}`);
medium line 159

Template literal with variable interpolation in command context

SourceSKILL.md
159console.log(`✓ Connected to ${result.platform}`);
medium line 160

Template literal with variable interpolation in command context

SourceSKILL.md
160console.log(` Balance: $${result.balance}`);
medium line 162

Template literal with variable interpolation in command context

SourceSKILL.md
162console.log(`✗ Failed: ${result.error}`);
medium line 187

Template literal with variable interpolation in command context

SourceSKILL.md
187console.log(`Cooldown: ${remaining} minutes remaining`);
low line 59

Access to .env file

SourceSKILL.md
59encryptionKey: process.env.CREDENTIALS_KEY,
Scanned on Feb 19, 2026
View Security Dashboard