amz-sales-estimator

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the document for literal high-entropy credentials (API keys, private keys, passwords). No API keys, PEM blocks, or passwords were present. However the WhatsApp invite link at the end (https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY) contains a high-entropy token (ILX65p1yWcaIG3c9WGHpTY) that directly grants access to a private group. Per the provided secret definition — "a high-entropy, literal value that provides access to a service" — this invite URL qualifies as a secret/credential. If that link is intentionally public, it can be treated as non-sensitive; otherwise it should be removed or redacted.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:08 PM
Issues
1
Security Audit — snyk — amz-sales-estimator