Scan report: Docker

Scan: warningsv1 · scanner unicode@1+injection@1+exfil@2+secrets@2 · 2026-08-11 21:22:21 UTC · 2ms

Every version on Waxmark is scanned for invisible/zero-width Unicode, bidi controls, prompt-injection phrasing, exfiltration sinks, and embedded secrets before it is published. Edits always trigger a re-scan.

  • [warn] secrets/generic_secret

    Hard-coded credential assignment detected.

    API_KEY:…[redacted]

Want to inspect the exact bytes? Open the raw view.