amz-inbound-placement-optimizer

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the skill text for literal credentials. No API keys, PEM/private-key blocks, or passwords are present. However there is a WhatsApp invite URL (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY). The path portion (ILX65p1yWcaIG3c9WGHpTY) is a high-entropy token that grants access to a private chat group — it functions like an access credential and is not a generic placeholder or low-entropy example. Therefore it should be treated as a secret and handled/redacted.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:07 PM
Issues
1
Security Audit — snyk — amz-inbound-placement-optimizer