wecomcli-doc

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires constructing a JSON string passed to the wecom-cli (wecom-cli doc import --json '<JSON 参数>') which includes an optional passwd field for Office file encryption, so the LLM would need to handle and emit the secret value verbatim in the generated argument.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 scripts/build_docx.py 的运行时路径中，run_jsonl(spec_path, ...) 会读取并解析（_iter_spec_commands→_spec_validate_command→_dispatch）JSONL 里的文本字段来生成 docx，因此若该 JSONL/其字段可被外部用户自由提交，就会构成对外部自由文本的运行时摄取风险。