lark-sheets

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly coherent Feishu Sheets automation with official-looking API targets and proportionate document operations. The main issue is trust in the required `lark-cli` binary: this fragment does not provide a verifiable install/provenance path, so overall risk is elevated by supply-chain uncertainty rather than clear malicious behavior.

Confidence: 80%Severity: 72%
Audit Metadata
Analyzed At
Mar 28, 2026, 02:45 AM
Package URL
pkg:socket/skills-sh/larksuite%2Fcli%2Flark-sheets%2F@12fbca55392c6d55822ed4253d3a39b79a93ec5b