aws-sns-webhooks

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URL https://evil.example.com/cert.pem is an attacker-controlled/untrusted certificate URL (not an sns..amazonaws.com host) and is a high-risk source for delivering malicious signing certificates or other payloads.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The repo contains literal RSA private key PEM blocks (-----BEGIN PRIVATE KEY----- ... -----END PRIVATE KEY-----). These are high-entropy, real private keys (used in tests to sign messages) and therefore qualify as secrets under the definition (private keys). They are not placeholders or trivial setup passwords, so they should be flagged. (Public X.509 certificates are present too, but certificates are not secret; only the private key PEM blocks are flagged.)