compdf-pdf-to-markdown

Fail

Audited by Snyk on Aug 15, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned the documentation for literal high-entropy credentials. I found a 32-character hex token (8fef357511abec47a4a22313c1dcdb8b) used verbatim in the webhook example as both a ComPDF-Signature header and a webhookToken JSON field. This value is random-looking and could function as a shared secret/signature token; therefore it meets the definition of a secret (high-entropy literal that provides access/verification). I did not flag any placeholders like YOUR API-KEY or other obvious examples.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Aug 15, 2026, 08:37 AM
Issues
1