feishu-doc-perm
Fail
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill concept is a focused permission-management helper for Feishu documents, using tokens to query and modify permissions via Feishu APIs. It does not introduce download/execution chains, unverifiable binaries, or broad credential access beyond necessary API tokens. Data flows appear to involve legitimate API calls with tokens derived from user or inbound metadata. Overall risk is low to moderate (benign-suspicious borderline) given token handling and potential for misconfigurations if tokens are leaked, but nothing indicates intentional credential harvesting or exfiltration.
Confidence: 98%
Audit Metadata