companion-skill

Fail

Audited by Snyk on Oct 9, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). The scan identified a literal Zhipu AI API key (da8df5ba954341829f7afd05ca23a889.RrJoTsbaAkGYA6ZU) hardcoded in the INSTALL.md file (line 66) and the QUICKSTART.md file (line 24). This is a high-entropy, active credential rather than a documentation placeholder.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Oct 9, 2026, 09:31 AM
Issues
1