lov-wdb-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly describes decrypting and supplying WDB management keys for the Agent to use ("自动发现 WDB Pro 管理密钥" and "解密输出仅用于当前 Agent 调用"), meaning the LLM will receive plaintext secrets and may be required to include them verbatim in requests or outputs.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill explicitly describes automatic discovery of WDB Pro management keys and reading/decrypting local WeChat databases (credential discovery + local data access), and is distributed as an encrypted package that is decrypted at runtime (hidden payload), which strongly indicates intentional data-exfiltration / credential-theft behavior.