feishu-cli-search
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill is coherent with its stated purpose: it provides a Feishu search capability gated by a User Access Token with a clear login and token-refresh workflow. The primary security considerations involve local token storage protection, proper scoping during login (to avoid over-permissioned tokens), and ensuring the OAuth redirect flows are secure. There are no explicit installer/downloads from untrusted sources and no direct credential-forwarding to third-party binaries. However, the presence of local token management and OAuth flows introduces typical credential exposure risks that should be mitigated with proper secure storage, minimal scopes, and careful logging practices.
Confidence: 98%
Audit Metadata