sveltekit-advanced
Fail
Audited by Snyk on Jul 13, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the documentation for literal, high-entropy credentials. I found a literal UUID-like API key in an example .env file (examples/env-vars.md). It is a concrete, random-looking value (not a placeholder like YOUR_API_KEY or a truncated/redacted string), so per the secret definition it should be flagged. Other values in the docs are either environment variable names, simple example values/URLs, regex patterns, comments, or clearly placeholder/sample values and therefore ignored.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata