Skip to main content

WALLIFY - SKILL DOCUMENT

Establishes coding standards and practices for developers and designers in Wallify, ensuring a cohesive development environment.

Install this skill

or
43/100

Security score

The WALLIFY - SKILL DOCUMENT skill was audited on Feb 28, 2026 and we found 21 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 572

Template literal with variable interpolation in command context

SourceSKILL.md
572toast.error(`Failed to update: ${error.message}`)
medium line 720

Template literal with variable interpolation in command context

SourceSKILL.md
720className={`input ${errors.email ? 'border-red-500' : ''}`}
medium line 898

Template literal with variable interpolation in command context

SourceSKILL.md
898filter: `project_id=eq.${projectId}`
medium line 937

Template literal with variable interpolation in command context

SourceSKILL.md
937const prompt = `You are helping collect a video testimonial. Generate 3 thoughtful questions to ask a ${customerRole} in the ${industry} industry about their experience with a ${productType}.
medium line 965

Template literal with variable interpolation in command context

SourceSKILL.md
965const prompt = `Analyze this testimonial and score its quality from 0.0 to 1.0.
medium line 1001

Template literal with variable interpolation in command context

SourceSKILL.md
1001const prompt = `Extract relevant tags from this testimonial. Tags should be:
medium line 1307

Template literal with variable interpolation in command context

SourceSKILL.md
1307await page.goto(`https://twitter.com/${connection.handle}/mentions`)
medium line 1073

Webhook reference - potential data exfiltration

SourceSKILL.md
10732. Dashboard triggers webhook to scraper service
medium line 1245

Webhook reference - potential data exfiltration

SourceSKILL.md
1245- Express (API server for webhooks)
low line 99

Access to .env file

SourceSKILL.md
99├── .env.local # Environment variables (not committed)
low line 100

Access to .env file

SourceSKILL.md
100├── .env.example # Example env file (committed)
low line 162

Access to .env file

SourceSKILL.md
162├── .env.local
low line 925

Access to .env file

SourceSKILL.md
925apiKey: import.meta.env.VITE_OPENAI_API_KEY
low line 1609

Access to .env file

SourceSKILL.md
1609# Development (.env.local)
low line 1612

Access to .env file

SourceSKILL.md
1612# Production (.env.production)
low line 1774

Access to .env file

SourceSKILL.md
1774apiKey: import.meta.env.VITE_OPENAI_API_KEY
low line 1194

External URL reference

SourceSKILL.md
1194"@context": "https://schema.org",
low line 1307

External URL reference

SourceSKILL.md
1307await page.goto(`https://twitter.com/${connection.handle}/mentions`)
low line 1601

External URL reference

SourceSKILL.md
1601VITE_SUPABASE_URL=https://your-project.supabase.co
low line 1610

External URL reference

SourceSKILL.md
1610VITE_API_URL=http://localhost:3000
low line 1613

External URL reference

SourceSKILL.md
1613VITE_API_URL=https://api.wallify.com
Scanned on Feb 28, 2026
View Security Dashboard