hardcoded_secret
Potentially hardcoded secret
Potentially hardcoded secret
Line 29Snippets
const apiKey = "sk-proj-xxxxx" // Hardcoded secretconst dbPassword = "password123" // In source codeconst apiKey = "sk-proj-xxxxx" // Hardcoded secretconst dbPassword = "password123" // In source codenetwork_call
Outbound network call
Outbound network call
Line 432Snippets
const response = await fetch('/api/protected') const response = await fetch('/api/admin', { const response = await fetch('/api/users', { fetch('/api/endpoint') const response = await fetch('/api/protected')env_access
Environment variable access
Environment variable access
Line 35Snippets
const apiKey = process.env.OPENAI_API_KEYconst dbUrl = process.env.DATABASE_URLconst apiKey = process.env.OPENAI_API_KEYconst dbUrl = process.env.DATABASE_URLTrust Score
Updated 2周前
分析时间
2026年3月31日 15:58
+ 2 previous scans
兼容
Skill details
Updated 2周前
分析时间 2026年3月31日 15:58
说明
"This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints."
最近扫描
2026年3月31日 15:58
Latest analysis
2026年3月31日 15:11
Run 2
2026年3月27日 15:46
Run 1