lark-slides

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs extracting tokens (e.g., wiki obj_token / xml_presentation_id) from API responses and embedding them verbatim into subsequent CLI/JSON parameters (e.g., --params '{"xml_presentation_id":"..."}'), which requires the LLM to handle/output secret or sensitive token values directly.