| Severity | Issue Type | Location | Description | Action |
|---|---|---|---|---|
| Critical |
Password in Config
Security
|
marketing.gbai /poster.bas
Line 12
|
Hardcoded password found in BASIC file. Move to Vault.
POST TO INSTAGRAM username, password, image
|
|
| High |
Hardcoded Secret
Security
|
api-client.gbai/msft-partner.bas
Line 7
|
Client secret found in source code. Use environment variables.
client_secret = "abc123..."
|
|
| Medium |
Deprecated Keyword
Code Quality
|
default.gbai/start.bas
Line 45
|
Using deprecated IF...input pattern. Use HEAR AS instead.
IF input = "yes" THEN
|
|
| Low |
Underscore in Keyword
Naming Convention
|
crm.gbai/contacts.bas
Line 23
|
Keywords should use spaces not underscores.
GET_BOT_MEMORY → GET BOT MEMORY
|
|
| Info |
Missing Vault Config
Configuration
|
bank.gbai/config.csv
-
|
Bot is not configured to use Vault for secrets management. Consider enabling for better security.
|