telnyx-voice-conferencing-go

Fail

Audited by Snyk on Mar 27, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the full skill prompt for high-entropy, literal values that could grant access. The string "v3:MdI91X4lWFEs7IgbBEOT9M4AigoY08M0WWZFISt1Yw2axZ_IiE4pqg" appears multiple times and is a long, random-looking token used in call-related API examples (call_control_id / connection_id). Call control tokens can be used to issue commands via the Call Control API, so a real token hardcoded in docs would be a usable credential — I treat this as a potential secret.

Other candidates are UUIDs (e.g., "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e", "c46e06d7-b78f-4b13-96b6-c576af9640ff") and simple example values like "1234#", "support", "tier_1_support". UUIDs and these simple/example strings are identifiers or low-entropy/example values and do not meet the definition of a secret here, so I ignored them.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 27, 2026, 01:01 AM
Issues
1