feishu-docs
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
feishu-docCLI via the Bash tool to search and browse Feishu developer documentation. Access is restricted to this specific command prefix in the YAML frontmatter. - [EXTERNAL_DOWNLOADS]: The skill requires the global installation of the
feishu-doc-clinpm package. This is a vendor-related tool for interacting with the Feishu platform. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8). Ingestion points: Markdown documentation retrieved via the
feishu-doc readcommand from Feishu/Lark domains. Boundary markers: Absent. Capability inventory: Limited to thefeishu-doccommand, which restricts execution of arbitrary code but permits interaction with the documentation tool. Sanitization: Absent.
Audit Metadata