feishu-im-read
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is largely coherent with its stated purpose of reading Feishu messages and downloading resources, using official Feishu APIs and user-scoped permissions. There are no evident download-execute or unverifiable binary patterns. Data access and transfer patterns are consistent with a developer-facing messaging-tool. However, the combination of cross-chat search, thread expansion, and resource downloads elevates the risk profile due to broader data exposure potential. Overall, the evaluation indicates a SUSPICIOUS-to-MEDIUM risk posture due to data access scope, with no direct malicious indicators detected in the provided material.
Confidence: 98%
Audit Metadata