deepspeed

Fail

Audited by Snyk on Mar 28, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the entire skill prompt for high-entropy, literal credentials (API keys, tokens, PEM blocks). The only item that looks like a high-entropy secret is the Comet example value:

"experiment_key": "0c4a1c4a90664f2a8084e600b19a9d7"

This is a 32-character hex-like token (random-looking) embedded as a concrete string in a configuration example rather than a placeholder like "YOUR_API_KEY". That pattern matches the definition of a secret (high-entropy literal that could be used to access a service). There are no PEM blocks, long base64 bearer tokens, or other obvious API keys elsewhere. Other strings (e.g., /local_nvme, numeric values, config names) are not secrets (low entropy, examples, or environment names) and were ignored per the rules.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 28, 2026, 06:08 PM
Issues
1