Pingyin Weilaicheng Topic

• Risk level: Low
• Analyzed: Apr 1, 2026, 1:09 AM
• Findings: 0
• Version: 1.0.0

Overview

This is an instruction-only Douyin/short-video content guideline for a real-estate project with no code, no installs, and no requested credentials — it appears internally consistent, but confirm how the agent uses the Feishu push target and the skill's auto-load/permission metadata before enabling it.

This skill appears to be a benign, instruction-only content guideline and requests no credentials. Before installing: (1) confirm what 'autoLoad: true' and 'permissions: [read, write]' mean on your platform (does it enable the skill automatically or allow posting on your behalf?), (2) verify whether the Feishu target ID in the README is intended and whether the agent has any Feishu/Lark connector enabled that could post messages there, (3) test the skill in a sandbox or with a restricted agent profile to ensure it does not send outbound messages, and (4) if you need absolute safety, request a version of the skill with explicit, minimal runtime actions (or with autoLoad disabled) and an explanation of any push/notification behavior.