compdf-add-watermark-remover-watermark

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the skill and reference files for hardcoded, high-entropy secrets and ignored obvious placeholders like "YOUR API-KEY", "{{apiKey}}", and other example strings. The webhook example includes a 32-hex-character value (8fef357511abec47a4a22313c1dcdb8b) used both as a header (ComPDF-Signature) and as webhookToken in the JSON example. That string is high-entropy and not an obvious placeholder, so it looks like a literal credential/signature and is flagged. Other example GUIDs and sample taskIds are typical example values and not treated as secrets.