amz-category-renoding-fix

Fail

Audited by Snyk on May 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the full skill prompt and found no API keys, PEM/private key blocks, or simple example/setup passwords. However there is a WhatsApp group invite URL: https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY. The trailing token (ILX65p1yWcaIG3c9WGHpTY) is a high-entropy, literal value that grants access to a WhatsApp group — i.e., an actionable access token. It is not a placeholder or a low-entropy setup value, so it meets the criteria for a secret-like credential and should be treated as sensitive (redact or remove if unintended). No other high-entropy credentials were present.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
May 27, 2026, 02:07 AM
Issues
1
Security Audit — snyk — amz-category-renoding-fix