Security audit
Security checks for vulnerabilities and agentic risk
This Feishu Drive skill is a cloud-file management guide, but it also directs agents to make persistent sharing and public-edit permission changes without enough scoping or warnings.
Install only if you intend this skill to manage Feishu Drive permissions, not just files. Before use, require explicit user approval for every collaborator, full_access grant, external sharing change, and especially any internet-public read or edit link; prefer named collaborators and internal-only sharing by default.
The documentation explicitly includes internet-public readable and editable sharing modes, which can expose internal documents to anyone with the link or even broader audiences depending on platform behavior. In a cloud drive management skill, embedding public exposure options without strong justification, constraints, or warnings materially raises data leakage risk.
Recommending one-click internet-public editing for vendor collaboration normalizes one of the riskiest sharing modes without requiring a safety review or warning. Public edit access can lead to unauthorized modification, malware staging, defacement, or broad disclosure of sensitive business materials.
The declared permissions describe basic file operations, but the skill text makes permission-management actions effectively mandatory after writes and discusses changing sharing visibility. This creates a capability and intent mismatch that can cause operators or downstream systems to underappreciate the real access-control effects of using the skill.
Retrieving view/download records and managing security labels are specialized governance and compliance functions, distinct from the stated core purpose of uploading, downloading, moving, searching, and metadata management. These capabilities appear as extra administrative functions without corresponding purpose justification.
The skill is presented as routine file management, but the guidance expands it into access delegation and visibility modification, including broader sharing modes. That broader operational scope increases the chance of unintended exposure because users may invoke it expecting storage actions, not ACL or publication changes.
The skill describes internet-public permission settings without an explicit warning about confidentiality, unintended indexing, external resharing, or data-retention consequences. Users may apply high-exposure settings as routine workflow steps without recognizing that they are publishing content outside the organization.
