critical
suspicious.exposed_secret_literal
- Location
- dist/index.js:35
- Finding
- File appears to expose a hardcoded API secret or token.
- Evidence
apiKey: [REDACTED],
Openclaw Anthropic Vertex Provider 2026.5.19.Tgz
AdvisoryAudited by Static analysis on May 20, 2026.
Overview
Detected: suspicious.exposed_secret_literal
Findings (3)
critical
suspicious.exposed_secret_literal
- Location
- dist/provider-catalog.js:50
- Finding
- File appears to expose a hardcoded API secret or token.
- Evidence
apiKey: [REDACTED],
critical
suspicious.exposed_secret_literal
- Location
- dist/provider-discovery.js:41
- Finding
- File appears to expose a hardcoded API secret or token.
- Evidence
apiKey: [REDACTED],