image-gen
Fail
Audited by Snyk on Jul 23, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The repository contains a high-entropy Bearer token literal in scripts/image-gen.py. The Authorization header value ("Bearer sk-cp-...") is a long, random-looking string that matches the definition of an actual API key (not a placeholder like YOUR_API_KEY or a simple example password). This appears to be a real, hardcoded credential that can be used to access the external image-generation API, so it is flagged as a secret.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata