feishu-docs

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill suggests installing the feishu-doc-cli package globally via npm to provide the necessary tooling for document retrieval.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute feishu-doc commands, enabling search and read operations on the local system.
  • [PROMPT_INJECTION]: The skill is subject to potential indirect prompt injection because it retrieves and processes content from external documentation servers.
  • Ingestion points: Data enters the context from external Feishu/Lark documentation URLs via the feishu-doc read command.
  • Boundary markers: There are no explicit delimiters or system instructions to ignore embedded commands within the fetched documentation content.
  • Capability inventory: The skill has the capability to execute shell commands through the Bash tool.
  • Sanitization: External content is passed directly to the agent's context without sanitization or filtering of potential instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 04:37 AM