feishu-drive

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: Feishu Drive management through a bot-enabled interface. It uses token-based API interactions to list, retrieve info, create folders, move, and delete items. The primary security considerations are token exposure in transit/logs and strict adherence to least-privilege access, given the drive:drive capability. No unverifiable binaries or credential-forwarding appear evident in the provided fragment. Overall risk is low to medium, dominated by data exposure risk and proper secure handling of tokens and outputs.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 02:37 AM
Package URL
pkg:socket/skills-sh/Gen-Verse%2FOpenClaw-RL%2Ffeishu-drive%2F@feeb8c38d00c64c9ab843f8655c0ea5ca59d4a74