Feishu SuperToolkit

• Analyzed: Mar 26, 2026, 9:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7e6bfe08279725f38f717de434913321ce9638b6b3506ce41f905099bff4ee0e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded Feishu API credentials (FEISHU_APP_ID and FEISHU_APP_SECRET) within the SKILL.md documentation, which is a significant security risk. Additionally, the messaging_api.py file implements a 'send-file' endpoint that accepts an unvalidated 'file_path' parameter, creating an arbitrary file read vulnerability that allows the AI agent to access and exfiltrate any file from the host system to Feishu. While these behaviors align with the stated purpose of a Feishu toolkit, the combination of leaked credentials and high-risk file access capabilities poses a substantial threat to the host environment.