amz-attribution-campaign-planner
Fail
Audited by Snyk on May 27, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the skill prompt for literal, high-entropy values that directly grant access. The only candidate that meets the definition is the WhatsApp invite link at the end: "https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY". It contains a random-looking token and is a direct join URL that grants access to a group (i.e., a usable access credential). No API keys, private keys, or complex passwords appear elsewhere; other strings are tag examples or taxonomy codes (low entropy or clearly documentation/sample values) and were ignored per the rules.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata