amz-review-strategy

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I inspected the entire skill content for high-entropy, literal credentials (API keys, private keys, passwords, tokens). No API keys, PEM blocks, or passwords are present. The only value that matches the "high-entropy value that provides access" definition is the WhatsApp invite link at the end:

https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY

A WhatsApp group invite link contains an access token that allows joining the group, so it functions as a secret-like access token and should be treated as a credential. Everything else (unit counts, "200 USD", example wording, policy text) is non-secret documentation content and was ignored.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:08 PM
Issues
1
Security Audit — snyk — amz-review-strategy