byted-airesearch-survey
Fail
Audited by Snyk on Sep 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The documentation and code contain an example API key string (
3089e65f8d577071a7c9f7a1ae041716b351ac2a) shown inside a "Bad — the host showed unredacted API key" code/error block inSKILL.md:116. This value has high entropy and matches the 40-character hex pattern characteristic of real API keys/tokens. Although it is presented as a negative example of what not to leak, it constitutes a literal hardcoded credential leak in the documentation.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata