telnyx-video-ruby

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill prompt includes a hardcoded JWT token example for the refresh_token parameter, which exposes a secret value directly in the generated code.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). The documentation contains a hardcoded JWT refresh token inside a code example on line 370 (refresh_token: "eyJhbGci..."). This is a high-entropy string containing valid payload data for a Telnyx telephony token, representing a leaked credential in an example snippet rather than a generic placeholder.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 04:55 PM
Issues
2