腾讯文档 TENCENT DOCS

• Analyzed: May 11, 2026, 4:53 AM
• Findings: 1
• Version: 1.0.31
• Hash: e3d3243bf178e255934d6dd7e6cb340fda5f9f8a8f7e078258da320e7cf8412c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The tencent-docs skill bundle is a comprehensive and well-documented integration for managing Tencent Docs via an AI agent. The included scripts (setup.sh, import_file.sh, generate_slide.js) perform legitimate tasks such as OAuth token management, file uploads to Tencent's Cloud Object Storage (COS), and asynchronous task polling. The documentation (SKILL.md, auth.md) includes explicit security instructions, such as requiring user confirmation before fetching tokens and providing safety principles for JavaScript execution within spreadsheets. No evidence of malicious data exfiltration, unauthorized remote execution, or harmful prompt injection was found.