Skip to main content

hootsuite-security-basics

Enhances Hootsuite security by applying best practices for secrets management and access control, ensuring safe API key usage.

Install this skill

or
91/100

Security score

The hootsuite-security-basics skill was audited on May 27, 2026 and we found 5 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 58

Template literal with variable interpolation in command context

SourceSKILL.md
58'Authorization': `Basic ${Buffer.from(`${process.env.HOOTSUITE_CLIENT_ID}:${process.env.HOOTSUITE_CLIENT_SECRET}`).toString('base64')}`,
low line 54

Fetch to external URL

SourceSKILL.md
54const res = await fetch('https://platform.hootsuite.com/oauth2/token', {
low line 40

Access to .env file

SourceSKILL.md
40# .env (never commit)
low line 58

Access to .env file

SourceSKILL.md
58'Authorization': `Basic ${Buffer.from(`${process.env.HOOTSUITE_CLIENT_ID}:${process.env.HOOTSUITE_CLIENT_SECRET}`).toString('base64')}`,
low line 54

External URL reference

SourceSKILL.md
54const res = await fetch('https://platform.hootsuite.com/oauth2/token', {
Scanned on May 27, 2026
View Security Dashboard
Installation guide →