critical
suspicious.env_credential_access
- Location
- tests/integration/phase4a.test.js:14
- Finding
- Environment variable access combined with network send.
Website Skeleton Skill
AdvisoryAudited by Static analysis on May 15, 2026.
Overview
Detected: suspicious.dep_not_found_on_registry, suspicious.env_credential_access
Findings (2)
critical
suspicious.dep_not_found_on_registry
- Location
- Dependency manifests:1
- Finding
- 1 package(s) referenced in dependency files do not exist on their public registries: @website-skeleton/shared (npm)