feishu-pdf-downloader
Warn
Audited by Snyk on Mar 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly downloads files from third-party Feishu cloud drive using a file token (see SKILL.md "Download Process" and scripts/download_feishu_pdf.py) and then processes/extracts text from those PDFs (pdf/OCR steps), so untrusted user-generated content could be read and influence agent behavior.
Audit Metadata