sveltekit-advanced

Fail

Audited by Snyk on Jul 13, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the documentation for literal, high-entropy credentials. I found a literal UUID-like API key in an example .env file (examples/env-vars.md). It is a concrete, random-looking value (not a placeholder like YOUR_API_KEY or a truncated/redacted string), so per the secret definition it should be flagged. Other values in the docs are either environment variable names, simple example values/URLs, regex patterns, comments, or clearly placeholder/sample values and therefore ignored.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 13, 2026, 08:24 AM
Issues
1
Security Audit — snyk — sveltekit-advanced