decode_qrcode
解析二维码图片并提取其中的文本内容。当用户提到二维码识别、扫二维码、读二维码、解码 QR 时使用。
Invalid
This skill can't be scored yet
Validation errors are blocking scoring. Review and fix them to unlock Quality, Impact and Security scores. See what needs fixing →
High
W007: Insecure credential handling detected in skill instructions.
What this means
The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.
Why it was flagged
The skill decodes a QR image and "直接打印输出" the decoded content, which forces the agent to reveal any secret string embedded in the QR code verbatim in its output.
- Repository
- CoderWanFeng/python-office
- Commit
dd6fe56
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.