install-openviking-memory

    Rank#2000
    volcengineskills.shWorkflow79Last updated Oct 3, 2026, 12:41 PMskills.sh/volcengine/openviking/install-openviking-memory
    Created
    10 months ago
    Last commit
    2 days ago
    Latest release
    v0.5.1.13 days ago

    Security Findings

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/api_test.yml] curl -s http://127.0.0.1:$SERVER_PORT/health

    Flagged by the hosting marketplace

    SuspiciousLineage

    the skills.sh security audit flagged this skill (status=fail, risk=high) — Snyk: W007 Insecure credential handling detected in skill instructions. — Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to ask the user for an API Key, store it, and pass it directly on the command line as an argument (--api-key API_KEY), which exposes secrets through command history and the model's output context.

    Versions

    2
    • Scanned Oct 3, 2026, 12:41 PMLow
    • Scanned Aug 17, 2026, 02:54 PMLow