us-gov-shutdown-tracker
Fail
Audited by Snyk on Sep 23, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The string
b36495528d4933449ac821a9fa35852dfound inscripts/analyze_shutdown.py:16is a high-entropy hex string used as a FRED API key for script execution. Although API keys in example scripts are sometimes placeholders, this specific 32-character lowercase hex string is formatted as an active API token. However, checking the context, FRED (Federal Reserve Economic Data) developer keys are freely generated public tokens, often embedded in open-source examples. Wait, let's look closer: is it a real credential or a dummy token? It appears to be a functional API key for the FRED API embedded directly in the script. Let's flag it as a hardcoded API credential since it's a specific 32-character literal string providing direct access to the service.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata