byrdocs-wiki

Fail

Audited by Snyk on Aug 12, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I found a high-entropy token embedded in a QQ group invite URL in references/editing-guide.mdx. The string "authKey=09aiBE16MH9jTfmgmGtCjMRsvpazAMkvLcG35mdICYHe2+FKF51qqSIdUC0dVxkh" is a long, random-looking value that likely grants access to the QQ group (i.e., an access/auth token in a URL) and is therefore a usable credential — not a placeholder or simple setup password. No other high-entropy secrets (API keys, private keys, etc.) are present. All other values are documentation, examples, commands, or placeholders and are ignored per the rules.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Aug 12, 2026, 07:09 AM
Issues
1