feishu-message-recall
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script communicates exclusively with the official Feishu API domain (
open.feishu.cn) to perform message management operations, which is the expected behavior for this skill.- [CREDENTIALS_UNSAFE]: Authentication is handled usingFEISHU_APP_IDandFEISHU_APP_SECRETretrieved from environment variables. There are no hardcoded secrets or evidence of credential harvesting.- [COMMAND_EXECUTION]: The script provides a command-line interface usingargparseto allow users to specify message or thread IDs for deletion, but it does not execute arbitrary shell commands or interact with the underlying system in an unsafe manner.
Audit Metadata