amz-chargeback-defense

Fail

Audited by Snyk on May 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I found no API keys, private key blocks, high-entropy passwords, or environment variable values in the skill text except one literal token-like value in the WhatsApp invite link: https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY. That invite code (ILX65p1yWcaIG3c9WGHpTY) is a high-entropy string that directly grants access to a private WhatsApp group, so it meets the definition of a secret (a literal value that provides access to a service).

Other items (order ID placeholders, example text, headings, deadlines, and procedural instructions) are documentation placeholders or low-entropy examples and are ignored per the rules. No API keys, PEM blocks, or other high-entropy credentials were present.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
May 27, 2026, 02:07 AM
Issues
1
Security Audit — snyk — amz-chargeback-defense