feishu-cli-vc
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: References the
feishu-clitool from the author's repository on GitHub (github.com/riba2534/feishu-cli).\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8):\n - Ingestion points: The skill retrieves potentially untrusted meeting transcripts and summaries through
feishu-cli vc notesandfeishu-cli minutes get(SKILL.md).\n - Boundary markers: No delimiters or instructions are provided to the agent to treat external meeting data as untrusted or to ignore instructions within it.\n
- Capability inventory: The skill uses
Bashfor command execution andReadfor file access, which could be leveraged if malicious instructions in transcripts are executed.\n - Sanitization: No sanitization or verification of the content retrieved from Feishu is described in the skill instructions.
Audit Metadata