promovaweb-devops-review-n8n-stack

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I looked for literal, high-entropy values in the skill prompt that could be usable credentials. I found two long, random-looking tokens explicitly included as "default" values:
• N8N_ENCRYPTION_KEY: r3djGX2vPoeL9zKL (16 chars, mixed-case + digits)
• N8N_RUNNERS_AUTH_TOKEN: r3djGX2YCWRTvPoeHGRFGHL9zKLYaq31 (longer, high entropy)

These are high-entropy literal strings present in the documentation and therefore qualify as potential leaked credentials (the doc itself warns not to use them). I did not flag DB_POSTGRESDB_PASSWORD = "SENHA" because it is a low-entropy placeholder (ignored per the rules). I also ignored general placeholders and example values elsewhere (e.g., ports, domain examples, anchor names) per the "WHAT TO IGNORE" guidelines.