amz-rank-tracker

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I reviewed the full skill content and the empty <potential_matches> list. No API keys, private key blocks, or high-entropy credentials appear except for one access token embedded in a URL.

The WhatsApp invite URL "https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY" contains a high-entropy invite token (ILX65p1yWcaIG3c9WGHpTY) which directly grants access to the group. Under the provided definition — "a literal value that provides access to a service" — this qualifies as a secret-like token. All other strings are documentation text or non-sensitive (no placeholders, simple example passwords, env var names, or truncated/redacted secrets).

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:08 PM
Issues
1
Security Audit — snyk — amz-rank-tracker