feishu-setup

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected within the skill files.
  • [COMMAND_EXECUTION]: The included script apply-scopes.sh is used to automate administrative tasks. It reads local configuration data from the user's home directory (~/.openclaw/openclaw.json) and interacts with official Feishu APIs. These actions are transparent and align with the skill's stated purpose.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to open.feishu.cn. As the official developer portal for Feishu (a well-known service), this is considered a trusted destination for the intended setup process.
  • [CREDENTIALS_UNSAFE]: The documentation and scripts handle credentials appropriately by using placeholders in examples and reading from local user configuration files rather than hardcoding sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 12:58 PM