amz-profit-analyzer

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the full skill. No API keys, PEM/private keys, or obvious high-entropy credentials appear except the WhatsApp invite URL at the end (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY). That URL contains a high-entropy, literal token that can be used to join the group (i.e., it functions as an access token/invite). Per the secret definition (high-entropy literal that grants access), this qualifies as a real credential. No other secrets or sensitive tokens were found. (No placeholders, no simple setup passwords, no truncated/redacted secrets.)

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:08 PM
Issues
1
Security Audit — snyk — amz-profit-analyzer