voice-clone
Fail
Audited by Snyk on Apr 18, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.80). The prompt's example code constructs and sends an Authorization header using a hard-coded WAVESPEED_KEY ("your_api_key"), which encourages embedding and transmitting API keys verbatim rather than using environment variables or a secure auth flow, posing an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata