telnyx-voice-ruby
Fail
Audited by Snyk on Mar 14, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned for high-entropy, literal values that could provide access. I found one high-entropy string used verbatim in an example: "v3:MdI91X4lWFEs7IgbBEOT9M4AigoY08M0WWZFISt1Yw2axZ_IiE4pqg" (used as call_control_id_to_bridge_with). This is not a generic placeholder, is random-looking, and could represent a usable resource/token — so it should be treated as a potential secret.
Other values were ignored:
- "7267xxxxxxxxxxxxxx", "1293384261075731499", numeric IDs and phone numbers — obfuscated/sample IDs or low-entropy values (documentation examples).
- ENV["TELNYX_API_KEY"] — just an environment variable name (no value).
- Example strings like "call_control_id", "https://example.com", "+18005550101" — obvious placeholders or sample data.
- No API keys (sk-...), private keys, or PEM blocks were present.
If the v3:... value is real, rotate and remove from docs; otherwise clarify it is a redacted/example value.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata