li-skill-publisher
Fail
Audited by Snyk on Oct 12, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). An active Gitee API access token (
b8fc164c5c229adfdbf7e6a9bb59c76c) is hardcoded inreferences/config.json. This is a high-entropy credential that grants full access to the repository via the Gitee API.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata