feishu-channel
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by requiring sensitive Feishu application IDs and secrets to be stored in environment variables rather than hardcoded in scripts.\n- [SAFE]: Incoming webhooks are validated using Feishu's verification tokens and support industry-standard AES-256-CBC encryption to protect message integrity and confidentiality.\n- [SAFE]: The integration includes built-in access control mechanisms, allowing administrators to restrict message processing to specific authorized users and group IDs via whitelists.\n- [SAFE]: Network communications are limited to legitimate Feishu API endpoints and the user-specified OpenClaw gateway, with no evidence of unauthorized data exfiltration.
Audit Metadata