Security checks across malware telemetry and agentic risk
This skill appears to do what it claims, but it creates Feishu apps and handles app secrets in ways users should review carefully before installing.
Install only if you intentionally want this skill to create and configure Feishu applications in your tenant. Verify FEISHU_API_BASE is the official Feishu endpoint, use the smallest permissions needed, avoid running it in logged terminals or CI, and protect or relocate the generated config file because it contains app credentials.
"app_secret": self.app_secret
}
response = requests.post(url, json=payload)
data = response.json()
if data.get("code") != 0:"category": "效率办公"
}
response = requests.post(url, json=payload, headers=headers)
data = response.json()
if data.get("code") != 0:"permission_point_codes": permissions
}
response = requests.post(url, json=payload, headers=headers)
data = response.json()
if data.get("code") != 0:"webhook": webhook_url if webhook_url else None
}
response = requests.post(url, json=payload, headers=headers)
data = response.json()
if data.get("code") != 0:64/64 vendors flagged this skill as clean.