amz-attribution-campaign-planner

Fail

Audited by Snyk on May 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the skill prompt for literal, high-entropy values that directly grant access. The only candidate that meets the definition is the WhatsApp invite link at the end: "https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY". It contains a random-looking token and is a direct join URL that grants access to a group (i.e., a usable access credential). No API keys, private keys, or complex passwords appear elsewhere; other strings are tag examples or taxonomy codes (low entropy or clearly documentation/sample values) and were ignored per the rules.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
May 27, 2026, 02:07 AM
Issues
1
Security Audit — snyk — amz-attribution-campaign-planner