amz-deal-finder

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I inspected the skill content for literal, high-entropy values that grant access. The WhatsApp invite URL (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY) contains a random-looking invite code that can be used to join the group — this is an active access token rather than a documentation placeholder, so it qualifies as a secret under the provided definition. No API keys, private keys/PEM blocks, or other high-entropy credentials were found. There are no obvious placeholders, setup passwords, or truncated/redacted tokens to ignore.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:07 PM
Issues
1
Security Audit — snyk — amz-deal-finder