feishu-automation
Fail
Audited by Snyk on Mar 10, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The prompt includes concrete curl examples that embed app_id/app_secret and Authorization Bearer tokens inline (even if as placeholders), which encourages substituting real secrets directly into commands and would require the LLM to output those secret values verbatim if provided.
Audit Metadata