feishu-cli-write
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executefeishu-clicommands for document creation, permission management, and content updates. These operations are core to the skill's purpose as a CLI wrapper. - [COMMAND_EXECUTION]: Employs a
python3one-liner to perform defensive encoding validation on generated Markdown files, specifically checking for the U+FFFD replacement character to prevent data corruption during import. - [EXTERNAL_DOWNLOADS]: References the
feishu-clitool's GitHub repository (github.com/riba2534/feishu-cli) for installation. As the repository is owned by the skill's author, it is categorized as a vendor resource. - [CREDENTIALS_UNSAFE]: Instructions correctly advise users to manage sensitive credentials (
FEISHU_APP_ID,FEISHU_APP_SECRET) via environment variables or a configuration file (config.yaml), which is an industry-standard secure practice. - [DATA_EXFILTRATION]: While the skill interacts with the Feishu API, all network operations are directed towards the official Feishu platform as part of the intended document management functionality.
Audit Metadata