deepspeed
Fail
Audited by Snyk on Mar 28, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the entire skill prompt for high-entropy, literal credentials (API keys, tokens, PEM blocks). The only item that looks like a high-entropy secret is the Comet example value:
"experiment_key": "0c4a1c4a90664f2a8084e600b19a9d7"
This is a 32-character hex-like token (random-looking) embedded as a concrete string in a configuration example rather than a placeholder like "YOUR_API_KEY". That pattern matches the definition of a secret (high-entropy literal that could be used to access a service). There are no PEM blocks, long base64 bearer tokens, or other obvious API keys elsewhere. Other strings (e.g., /local_nvme, numeric values, config names) are not secrets (low entropy, examples, or environment names) and were ignored per the rules.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata