wecomcli-manage-smartsheet-schema
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local command-line interface,
wecom-cli, to perform structural changes to Smart Sheets. This is the primary method of operation described in the documentation. - [COMMAND_EXECUTION]: Shell commands are constructed using parameters like
docid,sheet_id, andfield_titleprovided by the user or extracted from documents. While the documentation suggests wrapping JSON parameters in single quotes, there is an inherent risk of command injection if the agent does not correctly escape user-controlled strings when building these shell commands.
Audit Metadata