telnyx-video-ruby
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill prompt includes a hardcoded JWT token example for the refresh_token parameter, which exposes a secret value directly in the generated code.
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The documentation contains a hardcoded JWT refresh token inside a code example on line 370 (
refresh_token: "eyJhbGci..."). This is a high-entropy string containing valid payload data for a Telnyx telephony token, representing a leaked credential in an example snippet rather than a generic placeholder.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata