Security audit
Security checks for vulnerabilities and agentic risk
This Feishu wiki skill is mostly coherent, but it can modify shared wiki/document content and its instructions do not clearly require explicit confirmation before those changes.
Install only if you expect the agent to manage Feishu wiki content, not just browse it. Prefer read-only wiki permissions where possible, and require the agent to confirm the exact space, node, document, and intended change before creating, moving, renaming, or writing pages.
The activation text uses generic phrases like 'knowledge base', 'wiki', or 'wiki links', which are common in ordinary conversation and can cause over-broad skill activation. In a write-capable integration, unintended activation increases the chance the agent will access or modify Feishu content when the user did not explicitly intend to invoke this tool.
The skill documents state-changing operations across both wiki and dependent document tools, including create, move, rename, and write flows, but provides no warning, confirmation gate, or scope limitation for modifying user content. Because the skill explicitly instructs a workflow from wiki navigation to document write operations, accidental or prompt-induced misuse could lead to unauthorized content edits, renames, or reorganization of knowledge base data.
No suspicious patterns detected.
