feishu-im-read

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is largely coherent with its stated purpose of reading Feishu messages and downloading resources, using official Feishu APIs and user-scoped permissions. There are no evident download-execute or unverifiable binary patterns. Data access and transfer patterns are consistent with a developer-facing messaging-tool. However, the combination of cross-chat search, thread expansion, and resource downloads elevates the risk profile due to broader data exposure potential. Overall, the evaluation indicates a SUSPICIOUS-to-MEDIUM risk posture due to data access scope, with no direct malicious indicators detected in the provided material.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/larksuite%2Fopenclaw-lark%2Ffeishu-im-read%2F@74e03fbedf2efadf33a4cf8c09a3481534ebeaaa