unkey
Unkey provides open-source API key management and rate limiting, enabling secure API access and usage tracking for developers.
Install this skill
or
91/100
Security score
The unkey skill was audited on May 12, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 85
Template literal with variable interpolation in command context
SourceSKILL.md
| 85 | console.log(`Customer: ${ownerId}, Plan: ${meta.plan}, Remaining: ${remaining}`); |
low line 35
Access to .env file
SourceSKILL.md
| 35 | const unkey = new Unkey({ rootKey: process.env.UNKEY_ROOT_KEY! }); |
low line 39
Access to .env file
SourceSKILL.md
| 39 | apiId: process.env.UNKEY_API_ID!, |
low line 73
Access to .env file
SourceSKILL.md
| 73 | apiId: process.env.UNKEY_API_ID!, |
low line 121
Access to .env file
SourceSKILL.md
| 121 | apiId: process.env.UNKEY_API_ID!, |
Scanned on May 12, 2026
View Security Dashboard