飞书Bitable管理工具

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This is a documentation-only Feishu Bitable helper whose data-changing instructions are disclosed and aligned with managing Bitable tables and records.

Install this only if you want your agent to operate on Feishu Bitable data. Use least-privilege Feishu access, confirm the target app and table before bulk updates or deletes, and treat delete operations as irreversible even though the skill itself contains no executable code.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The trigger guidance includes very broad generic nouns like '数据表', '记录', and '字段', which can appear in many unrelated contexts and may cause the agent to invoke this skill when the user did not intend Feishu Bitable operations. In a write-capable enterprise data management skill, unintended invocation increases the risk of acting on the wrong system or performing accidental data access/modification.

VirusTotal

65/65 vendors flagged this skill as clean.