wecom-smartsheet

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能与“读取企业微信智能表格”主题相关,但其核心能力是利用已登录浏览器会话和未公开内存接口绕过官方权限边界读取数据。未见外部安装或明显外传,因此不像直接恶意窃密器;但其访问方式与官方授权模型不一致,存在明显越权与数据泄露风险,整体应判为可疑。

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:58 AM
Package URL
pkg:socket/skills-sh/briqt%2Fagent-skills%2Fwecom-smartsheet%2F@3e0a2bd065783217cefbce5d46c1e0e1d990eee5