feishu-cli-chat
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to runfeishu-clicommands, which is the necessary and intended mechanism for interacting with the Feishu platform. - [DATA_EXFILTRATION]: The skill facilitates access to Feishu chat history, group information, and user details. This data access is restricted to the agent's context and is performed via authenticated CLI calls as per the skill's primary purpose.
- [PROMPT_INJECTION]: The skill processes message content from an external source (Feishu), which creates a potential surface for indirect prompt injection if those messages contain adversarial instructions. * Ingestion points: Message data retrieved via
feishu-cli msg historyand search commands. * Boundary markers: None identified in the provided instructions. * Capability inventory: Access toBash,Read, andWritetools. * Sanitization: Content is processed as JSON; no specific sanitization or filtering for embedded instructions is described.
Audit Metadata