office-automation

Fail

Audited by Snyk on Jun 18, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). 示例配置直接包含 SMTP 用户名与明文密码,并且功能要求代理使用这些凭据发送邮件,容易促使模型在生成命令或配置时包含/回显秘密值,存在凭证外泄风险。

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jun 18, 2026, 07:42 PM
Issues
1
Security Audit — snyk — office-automation