Skip to main content

unkey

Unkey provides open-source API key management and rate limiting, enabling secure API access and usage tracking for developers.

Install this skill

or
89/100

Security score

The unkey skill was audited on Mar 7, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 62

Template literal with variable interpolation in command context

SourceSKILL.md
62name: `${customerId}-${plan}`,
low line 50

Access to .env file

SourceSKILL.md
50const unkey = new Unkey({ rootKey: process.env.UNKEY_ROOT_KEY! });
low line 59

Access to .env file

SourceSKILL.md
59apiId: process.env.UNKEY_API_ID!,
low line 98

Access to .env file

SourceSKILL.md
98apiId: process.env.UNKEY_API_ID!,
low line 133

Access to .env file

SourceSKILL.md
133apiId: process.env.UNKEY_API_ID!,
low line 151

Access to .env file

SourceSKILL.md
151apiId: process.env.UNKEY_API_ID!,
low line 166

Access to .env file

SourceSKILL.md
166const unkey = new Unkey({ rootKey: process.env.UNKEY_ROOT_KEY! });
Scanned on Mar 7, 2026
View Security Dashboard