amz-buy-box

Fail

Audited by Snyk on May 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the full prompt for high-entropy, literal values that grant access. No API keys, PEM blocks, or passwords are present. However, the WhatsApp invite URL (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY) contains a high-entropy token that directly grants access to a group. That token functions like an access credential and therefore meets the definition of a secret. If that link is intended to be public, treat accordingly; otherwise it should be removed or rotated.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
May 27, 2026, 02:07 AM
Issues
1
Security Audit — snyk — amz-buy-box