feishu-cli-perm

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill description presents a focused, legitimate developer tooling capability for Feishu document permission management. There are no explicit download/install steps, no unverifiable binaries, and no evident credential forward to third-party services beyond standard API usage. The main security consideration is ensuring tokens and IDs are not echoed in logs or exposed in outputs, and that API endpoints are trusted and properly authenticated. Overall, the footprint is coherent with the stated purpose, but the lack of concrete implementation details means practical risk hinges on how inputs are handled in the actual CLI implementation.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 05:09 AM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-perm%2F@dbfea66d6df02fc429abbcf9a67069cc40079ab1