Security audit
Feishu Voice Note via FFmpeg
Security checks across malware telemetry and agentic risk
Overview
This is a small Feishu voice-note formatting guide that uses ffmpeg for audio conversion and does not contain executable code, credential handling, persistence, or hidden behavior.
Install this if you want guidance for converting TTS audio into Feishu voice bubbles. Make sure ffmpeg is installed from a trusted source, validate any bot credentials separately in your own app, and clean up temporary audio files after conversion.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.