telnyx-voice-ruby

Fail

Audited by Snyk on Mar 14, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned for high-entropy, literal values that could provide access. I found one high-entropy string used verbatim in an example: "v3:MdI91X4lWFEs7IgbBEOT9M4AigoY08M0WWZFISt1Yw2axZ_IiE4pqg" (used as call_control_id_to_bridge_with). This is not a generic placeholder, is random-looking, and could represent a usable resource/token — so it should be treated as a potential secret.

Other values were ignored:

  • "7267xxxxxxxxxxxxxx", "1293384261075731499", numeric IDs and phone numbers — obfuscated/sample IDs or low-entropy values (documentation examples).
  • ENV["TELNYX_API_KEY"] — just an environment variable name (no value).
  • Example strings like "call_control_id", "https://example.com", "+18005550101" — obvious placeholders or sample data.
  • No API keys (sk-...), private keys, or PEM blocks were present.

If the v3:... value is real, rotate and remove from docs; otherwise clarify it is a redacted/example value.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Mar 14, 2026, 06:36 AM
Issues
1