Propose a patch

Evidence

The sandbox observed nothing beyond the static findings; the proposal cites those.

diff --git a/.well-known/apis.json b/.well-known/apis.json
--- a/.well-known/apis.json
+++ b/.well-known/apis.json
@@ -41,1 +41,0 @@
-"description": "Extracts, filters, and enriches live Brazilian government public tenders (Pregão Eletrônico, Dispensa - Lei 14.133) from the official PNCP API with item-level pricing, ME/EPP flags, an
@@ -122,1 +121,0 @@
-"description": "Maps Brazilian NCM product catalogs and audits NF-e XML invoices for the 2026 Tax Reform (LC 214/2025 - IBS, CBS, and Imposto Seletivo). Returns cClassTrib, CST, reduction percentages,
@@ -203,1 +201,0 @@
-"description": "Stateless (100% LGPD compliant) ANS TISS 4.03.00 XML medical billing validator, automatic MD5 hash recalculator, and TUSS 8-digit procedure code auditor to prevent health insurance bil
@@ -284,1 +281,0 @@
-"description": "Calculates the mandatory Brazilian ANTT minimum road freight floor (Lei 13.703/2018 - CCD x km + CC) and audits CT-e 4.00 XML invoices in batch to prevent automatic ANTT/SEFAZ fines.\n
@@ -365,1 +361,0 @@
-"description": "B2B healthcare lead extractor and enricher for US doctors, dentists, clinics, and hospitals using the official CMS NPPES NPI Registry API v2.1. Extracts NPI-1 and NPI-2 records, practi
diff --git a/rapidapi_zyla_hub_suite/apis.json b/rapidapi_zyla_hub_suite/apis.json
--- a/rapidapi_zyla_hub_suite/apis.json
+++ b/rapidapi_zyla_hub_suite/apis.json
@@ -41,1 +41,0 @@
-"description": "Extracts, filters, and enriches live Brazilian government public tenders (Pregão Eletrônico, Dispensa - Lei 14.133) from the official PNCP API with item-level pricing, ME/EPP flags, an
@@ -122,1 +121,0 @@
-"description": "Maps Brazilian NCM product catalogs and audits NF-e XML invoices for the 2026 Tax Reform (LC 214/2025 - IBS, CBS, and Imposto Seletivo). Returns cClassTrib, CST, reduction percentages,
@@ -203,1 +201,0 @@
-"description": "Stateless (100% LGPD compliant) ANS TISS 4.03.00 XML medical billing validator, automatic MD5 hash recalculator, and TUSS 8-digit procedure code auditor to prevent health insurance bil
@@ -284,1 +281,0 @@
-"description": "Calculates the mandatory Brazilian ANTT minimum road freight floor (Lei 13.703/2018 - CCD x km + CC) and audits CT-e 4.00 XML invoices in batch to prevent automatic ANTT/SEFAZ fines.\n
@@ -365,1 +361,0 @@
-"description": "B2B healthcare lead extractor and enricher for US doctors, dentists, clinics, and hospitals using the official CMS NPPES NPI Registry API v2.1. Extracts NPI-1 and NPI-2 records, practi
diff --git a/apis.json b/apis.json
--- a/apis.json
+++ b/apis.json
@@ -41,1 +41,0 @@
-"description": "Extracts, filters, and enriches live Brazilian government public tenders (Pregão Eletrônico, Dispensa - Lei 14.133) from the official PNCP API with item-level pricing, ME/EPP flags, an
@@ -122,1 +121,0 @@
-"description": "Maps Brazilian NCM product catalogs and audits NF-e XML invoices for the 2026 Tax Reform (LC 214/2025 - IBS, CBS, and Imposto Seletivo). Returns cClassTrib, CST, reduction percentages,
@@ -203,1 +201,0 @@
-"description": "Stateless (100% LGPD compliant) ANS TISS 4.03.00 XML medical billing validator, automatic MD5 hash recalculator, and TUSS 8-digit procedure code auditor to prevent health insurance bil
@@ -284,1 +281,0 @@
-"description": "Calculates the mandatory Brazilian ANTT minimum road freight floor (Lei 13.703/2018 - CCD x km + CC) and audits CT-e 4.00 XML invoices in batch to prevent automatic ANTT/SEFAZ fines.\n
@@ -365,1 +361,0 @@
-"description": "B2B healthcare lead extractor and enricher for US doctors, dentists, clinics, and hospitals using the official CMS NPPES NPI Registry API v2.1. Extracts NPI-1 and NPI-2 records, practi
diff --git a/rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js b/rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js
--- a/rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js
+++ b/rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js
@@ -60,1 +60,0 @@
-* Segredos individuais de proxy (`rapidapiProxySecret`) NÃO ficam hardcoded em código-fonte público.
@@ -71,1 +70,0 @@
-* Digests SHA-256 dos 31 rapidapiProxySecrets historicos revogados apos expurgo do commit 59410428.
@@ -275,1 +273,0 @@
-"CRO Security Gate: Rotate all 31 rapidapiProxySecrets in RapidAPI Studio and set RAPIDAPI_SECRETS_ROTATED_20261103=true before production Worker deploy.",
@@ -407,1 +404,0 @@
-"Blocked: historical RapidAPI proxy secret from purged commit 59410428 is permanently revoked. Rotate rapidapiProxySecret in RapidAPI Studio before deploying Worker.",
diff --git a/rapidapi_zyla_hub_suite/openapi_syndicator_2026.py b/rapidapi_zyla_hub_suite/openapi_syndicator_2026.py
--- a/rapidapi_zyla_hub_suite/openapi_syndicator_2026.py
+++ b/rapidapi_zyla_hub_suite/openapi_syndicator_2026.py
@@ -422,1 +422,0 @@
-remote_url = f"https://x-access-token:{gh_token}@github.com/{GITHUB_OWNER}/{GITHUB_REPO}.git"
diff --git a/specs_openapi_31/b2b-quant-mcp-server.json b/specs_openapi_31/b2b-quant-mcp-server.json
--- a/specs_openapi_31/b2b-quant-mcp-server.json
+++ b/specs_openapi_31/b2b-quant-mcp-server.json
@@ -6,1 +6,0 @@
-"description": "Official Master Model Context Protocol (MCP) Server & Tool Router for all 30 B2B Regulatory, KYB, Sanctions AML, SEC EDGAR, SAM.gov, EU TED, UK FCA, Brazil BCB/PIX/Tax, Healthcare & Se
@@ -144,1 +143,0 @@
-"RapidAPIProxySecret": []
@@ -147,1 +145,0 @@
-"ZylaProxySecret": []
@@ -773,1 +770,0 @@
-"RapidAPIProxySecret": {
@@ -777,1 +773,0 @@
-"description": "RapidAPI Hub shared proxy secret verified in constant time via hmac.compare_digest."
diff --git a/specs_openapi_31/healthcare-tiss-xml-validator.json b/specs_openapi_31/healthcare-tiss-xml-validator.json
--- a/specs_openapi_31/healthcare-tiss-xml-validator.json
+++ b/specs_openapi_31/healthcare-tiss-xml-validator.json
@@ -6,1 +6,0 @@
-"description": "Stateless (100% LGPD compliant) ANS TISS 4.03.00 XML medical billing validator, automatic MD5 hash recalculator, and TUSS 8-digit procedure code auditor to prevent health insurance bil
@@ -144,1 +143,0 @@
-"RapidAPIProxySecret": []
@@ -147,1 +145,0 @@
-"ZylaProxySecret": []
@@ -715,1 +712,0 @@
-"RapidAPIProxySecret": {
@@ -719,1 +715,0 @@
-"description": "RapidAPI Hub shared proxy secret verified in constant time via hmac.compare_digest."
diff --git a/rapidapi_zyla_hub_suite/rapidapi_zyla_gateway.py b/rapidapi_zyla_hub_suite/rapidapi_zyla_gateway.py
--- a/rapidapi_zyla_hub_suite/rapidapi_zyla_gateway.py
+++ b/rapidapi_zyla_hub_suite/rapidapi_zyla_gateway.py
@@ -74,1 +74,0 @@
-Carrega os 31 `rapidapiProxySecret`s individuais atribuídos pelo RapidAPI Studio
@@ -83,1 +82,0 @@
-sec = str((node.get("security") or {}).get("rapidapiProxySecret") or "").strip()
@@ -93,1 +91,0 @@
-# Digests SHA-256 dos 31 rapidapiProxySecrets historicos expostos no commit expurgado 59410428.
@@ -201,1 +198,0 @@
-os 31 `rapidapiProxySecret`s individuais do RapidAPI Studio) ou `X-Zyla-Proxy-Secret`
@@ -586,1 +582,0 @@
-"BLOQUEIO CRO: Rotacione os 31 rapidapiProxySecrets no RapidAPI Studio e defina "
diff --git a/specs_openapi_31/us-fda-recalls-safety-monitor.json b/specs_openapi_31/us-fda-recalls-safety-monitor.json
--- a/specs_openapi_31/us-fda-recalls-safety-monitor.json
+++ b/specs_openapi_31/us-fda-recalls-safety-monitor.json
@@ -6,1 +6,0 @@
-"description": "Monitors and enriches official U.S. FDA enforcement recall reports across Food, Drugs, and Medical Devices via openFDA. Calculates hazard severity scores (0-100) and generates Markdown
@@ -144,1 +143,0 @@
-"RapidAPIProxySecret": []
@@ -147,1 +145,0 @@
-"ZylaProxySecret": []
@@ -689,1 +686,0 @@
-"RapidAPIProxySecret": {
@@ -693,1 +689,0 @@
-"description": "RapidAPI Hub shared proxy secret verified in constant time via hmac.compare_digest."

Zero-context hunks: apply with git apply --unidiff-zero fix.patch on the tagged source of 2.1.0. If the behavior is intended, declare it (host under permissions.network, a line in the README) instead of removing it; the next crawl scores declarations.

Issue / PR body

Title: b2b-quant-mcp-n8n-suite: Credential pass-through configuration (KillerSkills verdict caution 66)

## What the honeypot observed
KillerSkills ran **[email protected]** in an isolated sandbox (decoy credentials, recording proxy, syscall trace; engine 1.8.1) and scored it **CAUTION 66/100**. Summary: no network, touches nothing outside the project, writes no memory.

- See the findings below.

Full trace and findings: https://killerskills.ai/skills/glama/b2b-quant-mcp-n8n-suite/2.1.0

## Findings with a location
- `.well-known/apis.json:41` · Credential pass-through configuration — .well-known/apis.json:41 · Credential pass-through configuration — agent relays sensitive credentials
- `.well-known/apis.json:122` · Credential pass-through configuration — .well-known/apis.json:122 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/apis.json:122` · Credential pass-through configuration — rapidapi_zyla_hub_suite/apis.json:122 · Credential pass-through configuration — agent relays sensitive credentials
- `.well-known/apis.json:284` · Credential pass-through configuration — .well-known/apis.json:284 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/apis.json:41` · Credential pass-through configuration — rapidapi_zyla_hub_suite/apis.json:41 · Credential pass-through configuration — agent relays sensitive credentials
- `apis.json:203` · Credential pass-through configuration — apis.json:203 · Credential pass-through configuration — agent relays sensitive credentials
- `apis.json:365` · Credential pass-through configuration — apis.json:365 · Credential pass-through configuration — agent relays sensitive credentials
- `.well-known/apis.json:203` · Credential pass-through configuration — .well-known/apis.json:203 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js:60` · Credential pass-through configuration — rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js:60 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/apis.json:365` · Credential pass-through configuration — rapidapi_zyla_hub_suite/apis.json:365 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js:275` · Credential pass-through configuration — rapidapi_zyla_hub_suite/cloudflare_worker_proxy.js:275 · Credential pass-through configuration — agent relays sensitive credentials
- `rapidapi_zyla_hub_suite/apis.json:203` · Credential pass-through configuration — rapidapi_zyla_hub_suite/apis.json:203 · Credential pass-through configuration — agent relays sensitive credentials

## Proposed change
The attached patch removes the 40 lines above. If the behavior is intended, the fix is to declare it instead: list the host under `permissions.network` (or the MCP manifest) and say in the README why the package needs it; the next crawl will re-score it with the declaration taken into account.

## How this will be verified
Nothing is "verified safe" by assertion. When a new version is published, KillerSkills re-runs it in the honeypot and the verdict page updates; you can trigger it early from the verdict page ("Re-scan after I publish a fix"). Reply here or at [email protected] if you believe the verdict is wrong; disputes are reviewed by a person and the outcome is published on the verdict page.

_Proposed through killerskills.ai/threats by a user of the package, under their own GitHub account. The evidence is public; the package was never modified by KillerSkills._