telnyx-voice-conferencing-java
Fail
Audited by Snyk on Mar 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned for high-entropy literal values that could be used to access services. The string "v3:MdI91X4lWFEs7IgbBEOT9M4AigoY08M0WWZFISt1Yw2axZ_IiE4pqg" appears repeatedly in examples as a call_control_id/call-control connection identifier. It is long, random-looking, and (per the docs) call_control_id values are used to issue commands via the Call Control API — so this is a high-entropy value that could be usable. This is not a generic placeholder (e.g., YOUR_API_KEY) nor a simple example password, so it should be treated as a secret.
I ignored the UUID-like values such as "182bd5e5-6e1a-4fe4-a799-aa6d9a6ab26e" and "c46e06d7-b78f-4b13-96b6-c576af9640ff" because they are standard UUIDs used as resource IDs in examples (lower entropy, common in docs, and described as IDs rather than credentials).
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata