high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/distribute-tokens/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/distribute-tokens/SKILL.md:56 SecretsSkill file

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/honeypot-check/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/honeypot-check/SKILL.md:86 SecretsSkill file

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/investigation-report/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/investigation-report/SKILL.md:72 SecretsSkill file

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/mcp-pulse/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/mcp-pulse/SKILL.md:44 SecretsSkill file

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/polymarket/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/polymarket/SKILL.md:30 SecretsSkill file

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/rug-scan/SKILL.md

Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.

skills/rug-scan/SKILL.md:96 SecretsSkill file

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/dashboard/app/page.tsx:160

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/dashboard/lib/github.ts:38

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/dashboard/lib/security/api-gate.ts:29

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/webhook/src/worker.js:20

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: CLAUDE.md