skills/liangdabiao/lark-workflow-feishu-cli/lark-shared/Socket

lark-shared

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent for a Lark/Feishu auth helper, and the security guidance is mostly proportional, but the skill's trust model is underspecified because it relies on an unqualified `lark-cli` binary with ambiguous provenance. Main concern is install/provenance ambiguity and credential handling through that CLI, not confirmed malicious behavior.

Confidence: 81%Severity: 64%

Audit Metadata

Analyzed At

Apr 13, 2026, 09:52 AM

Package URL

pkg:socket/skills-sh/liangdabiao%2Flark-workflow-feishu-cli%2Flark-shared%2F@2dc3edd57ddd5250446bf0d791ad386dde2ce58c