amz-hijacker-removal
Fail
Audited by Snyk on Jun 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the document for literal, high-entropy credentials. There are no API keys, private key blocks, or passwords. However, the WhatsApp invite URL "https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY" contains a long random-looking token (ILX65p1yWcaIG3c9WGHpTY) that directly grants access to the private chat. This is a high-entropy, usable access token (not a documentation placeholder or example), so it meets the definition of a secret.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata