lark-sheets
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Mostly coherent Feishu Sheets automation with official-looking API targets and proportionate document operations. The main issue is trust in the required `lark-cli` binary: this fragment does not provide a verifiable install/provenance path, so overall risk is elevated by supply-chain uncertainty rather than clear malicious behavior.
Confidence: 80%Severity: 72%
Audit Metadata