feishu-send-file

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill reads app_id/app_secret from a local config and posts them to obtain a tenant_access_token, then includes that token verbatim in Authorization headers for subsequent API requests, which requires the agent to handle and transmit secret values directly.