companion-skill
Fail
Audited by Snyk on Oct 9, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The scan identified a literal Zhipu AI API key (
da8df5ba954341829f7afd05ca23a889.RrJoTsbaAkGYA6ZU) hardcoded in theINSTALL.mdfile (line 66) and theQUICKSTART.mdfile (line 24). This is a high-entropy, active credential rather than a documentation placeholder.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata