wecomcli-media

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's examples and call format require the agent to insert raw media_id/file_path values into the wecom-cli JSON args (e.g. --json '{"media_id":"..."}'), and the spec treats media_id as an internal identifier that must not be exposed—forcing the LLM to handle sensitive identifiers verbatim in its output/tool invocation.