compdf-documents-to-pdf

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the documentation for literal high-entropy credentials and ignored obvious placeholders (e.g., "YOUR API-KEY", "{{apiKey}}"), sample UUIDs/taskIds, and generic example strings. I flagged a 32-character hex string that appears as a ComPDF webhook signature value in the webhook example because it is a high-entropy literal that resembles a real token (not a labelled placeholder). Other items such as "YOUR API-KEY", UUIDs (a300c232-...), and placeholder fields like "" are documentation examples or low-sensitivity values and were not flagged.