The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes legitimate CLI commands for initialization (lark-cli config init) and authentication (lark-cli auth login). These operations are essential for the skill's stated purpose of managing Lark resources.
[EXTERNAL_DOWNLOADS]: The skill includes instructions to update the CLI tool using npm update -g @larksuite/cli and npx skills add larksuite/cli. These commands target official vendor resources associated with the skill author and are presented as a guided update process for the user.
[DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill includes a specific security rule to prevent the output of sensitive credentials like appSecret or accessToken to the terminal.
[PROMPT_INJECTION]: The instructions focus on operational guidance and do not contain patterns attempting to override agent behavior or bypass safety filters.

lark-shared