Security checks across malware telemetry and agentic risk
The skill is mostly a documentation-writing helper, but it also includes under-scoped file-saving and external publishing features that users should review before installing.
Install only if you want a documentation skill that can help publish outputs, not just draft them. Prefer chat output for sensitive content, and before using Feishu, GitHub, Notion, Google Docs, or local-file output, confirm the exact destination, repository or document visibility, and whether the generated content is safe to persist outside the conversation.
'--content', content
]
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
if result.returncode == 0:
print(f"✅ 已创建飞书文档：{title}")- **Chat** → Reply directly
- **Feishu (MCP)** → Use mcporter to call Feishu MCP server
```bash
node /path/to/mcporter/dist/cli.js call feishu doc.create '{"title":"...", "content":"..."}'
# Note: mcporter path varies by installation, common paths:
# - ~/.npm/_npx/*/node_modules/mcporter/dist/cli.js
# - Or use: npx mcporter call feishu doc.create ...66/66 vendors flagged this skill as clean.