Feishu Image Sender

• Risk level: Low
• Analyzed: Feb 24, 2026, 5:24 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's files, instructions, and helper script are consistent with its stated purpose (sending local images to Feishu) and do not request unrelated credentials, install foreign code, or attempt hidden network exfiltration.

This skill appears internally consistent: it only validates local image files and prints the platform-specific message(...) call that would send the image via Feishu. Before installing or using it, confirm: (1) you trust the skill source (metadata shows no homepage and source is unknown), (2) the platform message tool actually invokes Feishu and you understand the Feishu authorization flow it prompts for, and (3) you do not paste or accept unexpected authorization URLs from unknown administrators. If you need additional assurance, inspect the message tool implementation on your platform (to ensure it won't exfiltrate data) and test with a non-sensitive sample image first.