Opus finding
Empty string for `value` is rejected, but other falsy inputs and types are not validated
lowapi-contractmedium
- dashboard/app/api/secrets/route.ts:89-91
`name` and `value` are not type-checked. A caller can send `value: 123` (number) or `value: { ... }` (object); execFileSync will coerce/throw with a confusing message. Also `!value` rejects legitimate empty-string secrets only after the falsy check, which is fine, but non-string types should be explicitly rejected.
Recommendation
Validate `typeof name === 'string' && typeof value === 'string'` (and similarly for DELETE's name) before passing to exec.