amz-stockout-recovery-plan

Fail

Audited by Snyk on Jun 25, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I flagged the WhatsApp invite URL. The invite token in "https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY" is a high-entropy token that directly grants access to a private group, so it qualifies as an access credential.

Ignored items:

  • "DOGLEASH10" — a marketing coupon/code, not a secret credential.
  • "ASIN: B0EXAMPLE" and other example values — placeholders/illustrative data.
  • Numeric examples, prices, PPC bids, and plain-word strings — low-entropy examples for documentation, not secrets.

No API keys, private keys, or other high-entropy secrets were found besides the WhatsApp invite link.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 25, 2026, 01:08 PM
Issues
1
Security Audit — snyk — amz-stockout-recovery-plan