feishu-cli-toolkit
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the
Bashtool to executefeishu-clicommands for interacting with Feishu APIs. It also provides complex shell scripts, particularly in the 'Document Attachments Download' section, which use utilities likegrep,sed, andtrto process local files. - [EXTERNAL_DOWNLOADS]: The skill features multiple commands for downloading content from Feishu (a well-known service), including
file download,media download, andwiki export. These operations are consistent with the skill's primary purpose of file and document management. - [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by ingesting and processing data from external Feishu sources such as documents, spreadsheets, and wiki pages.
- Ingestion points: Data enters the context through
feishu-cli doc export,wiki get, andsheet readoperations. - Boundary markers: No explicit boundary markers or 'ignore' instructions are used when processing the exported content in the provided scripts.
- Capability inventory: The skill can execute system commands via the
Bashtool and perform network operations through thefeishu-cliutility. - Sanitization: The provided processing scripts use regex-based pattern matching (via
grep) to extract tokens but do not perform security-focused sanitization of the document content.
Audit Metadata