Storage Manager

• Analyzed: Apr 14, 2026, 6:21 AM
• Findings: 1
• Version: 1.0.1
• Hash: 2e8c5c9892f2b6be2a38869bc8ed584a37b1f9b33557048b5aa832fc881b5bbf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded sensitive credentials, specifically a Feishu App Secret ('HHEZEDoNZwfNdoediXiGSbaRFKDmpB71') and Bitable tokens, across multiple files including complete_system.py, final_integrated.py, and storage_manager_final.py. While these appear to be default or test credentials for a specific Feishu Bitable instance, hardcoding secrets is a critical security vulnerability. Furthermore, the SKILL.md instructions explicitly direct the AI agent to operate 'without user confirmation' for its smart matching logic, which increases the risk of unintended data modification.