lark-sheets

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's examples and workflows require embedding document tokens/spreadsheet_token values directly into CLI/API command parameters (e.g., --params '{"token":"..."}' / '{"spreadsheet_token":"<spreadsheet_token>"}'), which forces the agent to handle and emit secret/token values verbatim and is therefore high-risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill accepts arbitrary spreadsheet URLs/tokens (including wiki URLs) and its +read/+find/+info/+export shortcuts explicitly fetch and parse cell contents from those cloud documents, meaning the agent will ingest user-generated third‑party content from external docs that could contain instructions influencing subsequent actions.