wps-excel

Fail

Audited by Snyk on Feb 24, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The skill includes methods that accept plaintext passwords (e.g., protectSheet/unprotectSheet with a password param and example literals like "123456") which require the agent to embed user-supplied secrets directly in generated tool-call payloads, creating an exfiltration risk.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 24, 2026, 07:27 AM