compdf-pdf-to-markdown
Fail
Audited by Snyk on Aug 15, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the documentation for literal high-entropy credentials. I found a 32-character hex token (8fef357511abec47a4a22313c1dcdb8b) used verbatim in the webhook example as both a ComPDF-Signature header and a webhookToken JSON field. This value is random-looking and could function as a shared secret/signature token; therefore it meets the definition of a secret (high-entropy literal that provides access/verification). I did not flag any placeholders like YOUR API-KEY or other obvious examples.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata