feishu-bitable

Fail

Audited by Snyk on Apr 1, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill instructs including app_token/file_token values directly in CLI/API calls (example shows app_token embedded in a command-line JSON), which would require the LLM to output secret tokens verbatim and thus risks exfiltration.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 1, 2026, 02:52 PM
Issues
1