Tencent Docs Reader

This skill's core reader (read_sheet.py) appears coherent: it uses agent-browser to open a Tencent Docs link, copy the canvas-rendered table via clipboard, and return tab-separated text. However, inspect and treat the included check_weekly_report.py as potentially data-exfiltrating: it is hard-coded with a DOC_URL and an enterprise-wechat webhook key and will POST the scraped content to that webhook. Before running anything: (1) review and remove or change the hard-coded DOC_URL, webhook URL, and QQ id; (2) prefer running read_sheet.py directly and avoid running check_weekly_report.py unless you understand and trust the webhook recipient; (3) run in an isolated environment or with a throwaway agent-browser/profile to avoid exposing private, authenticated documents; (4) consider moving any real webhook keys to environment variables and verify the webhook owner; (5) if you need automated notifications, replace the example webhook with your own destination and audit network traffic. If you want me to, I can point out the exact lines to change or produce a sanitized version that only writes output locally.