lark-sheets

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt's examples and CLI usage require inserting tokens like spreadsheet_token, file_token, and wiki_token directly into command-line JSON parameters, which forces the agent to include secret/document tokens verbatim in generated commands/outputs.