飞书需求整理

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 9:11 PM UTC
• Version: 1.0.1

Overview

This skill is a Chinese-language requirements-document generator whose Feishu document access and sharing behavior is disclosed and aligned with its purpose, though users should verify sensitive inputs and sharing permissions.

Install this if you want a Chinese Feishu-based requirements-document workflow. Before use, make sure the source documents are appropriate to process with the agent, remove secrets or unnecessary personal data, and confirm the exact Feishu recipient and edit permission before the generated document is shared.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (11)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill directs the agent to read customer communication records from Feishu documents, meeting minutes, and web-fetched sources, then process and rewrite that content into a new document, but it never warns the user that sensitive business data, personal information, or meeting contents may be transmitted through external tools and services. This creates a real privacy and data-handling risk because users may unknowingly expose confidential material outside the original context or approved data flow.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill instructs the agent to add edit permissions to the generated Feishu document, but it does not require validation of the recipient identity, least-privilege defaults, or a warning about the consequences of granting edit access. In a document-generation workflow containing customer requirements and meeting-derived data, this can lead to unauthorized access, oversharing, or accidental modification of sensitive documents.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: This markdown template is entirely written in Chinese, including the title, section headings, and placeholder guidance, with no indication that other languages are supported. Under the policy rule for language or locale, this effectively imposes a specific language without user opt-in or documented justification.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: The document title and all template content are written in Chinese, which establishes a fixed language for the skill artifact. Under the policy, forcing a specific language without user opt-in or a documented regional justification is a natural-language policy concern.

Natural-Language Policy Violations

Low

• Confidence: 93% confidence
• Finding: This markdown file contains natural-language instructions exclusively in Chinese, and nowhere indicates that users may choose another language or that the template is intended only for a Chinese-speaking or region-specific audience. Under the policy rule for language or locale constraints, forcing a specific language without opt-in is a reportable issue.

Natural-Language Policy Violations

Low

• Confidence: 95% confidence
• Finding: This markdown template forces a specific language/locale for all users through its headings and placeholders. Under the policy, language constraints should either be optional for users or explicitly justified as region-specific.

Natural-Language Policy Violations

Low

• Confidence: 90% confidence
• Finding: This markdown file is entirely Chinese-language content and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: This markdown file contains a full skill reference template in a single language and does not indicate that users may choose another language or that the scope is limited to a Chinese-speaking context. Under the policy rule for language or locale constraints, forcing one language without opt-in can be a natural-language policy issue.

Natural-Language Policy Violations

Low

• Confidence: 88% confidence
• Finding: This markdown file contains user-facing natural-language content exclusively in Chinese, which can amount to a language/locale constraint without user opt-in. The policy for this audit requires flagging cases where a skill forces a specific language unless the limitation is explicitly documented and justified.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: This markdown template forces a specific language/locale for all users through its headings, labels, and placeholder text. The file does not indicate that Chinese is optional, user-selected, or justified as a region-specific requirement, which matches the language/locale policy violation criterion.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: This markdown file contains user-facing natural language exclusively in Chinese, and there is no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy concern.

Static analysis

No suspicious patterns detected.