amz-q4-restock-war-room
Fail
Audited by Snyk on Jun 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the document for high-entropy, literal values that could grant access. No API keys, private keys (PEM blocks), passwords, or environment variable values were present. However, the WhatsApp invite URL (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY) contains a high-entropy invite token that directly grants access to the group. This is not a placeholder or a trivial example — it is an active access link and therefore qualifies as a secret under the definition ("a literal value that provides access to a service").
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata