skills/bobibobuyu/wind-skills-test/mx-finance-data/Snyk

mx-finance-data

Fail

Audited by Snyk on Oct 11, 2026

Risk Level: HIGH

Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

Secret detected (high risk: 1.00). The string assigned to the EM_API_KEY default value in scripts/get_data.py (em_eaRnxyWlMUiriR0Tj2m79QtUtxjTU0hQ) is a hardcoded API key with sufficient length and entropy to provide access to the remote EastMoney financial service API. This constitutes a valid hardcoded credential leak in the source code.

Issues (1)

W008

HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata

Risk Level

HIGH

Analyzed

Oct 11, 2026, 11:58 AM

Issues

1