Feishu Leave Request

• Outcome: Pass
• Latest audit: May 27, 2026, 9:36 PM
• Version:
  1.0.1

Overview

This is an instruction-only Feishu leave-request helper that is scoped to collecting confirmed leave details and submitting them through the user's own Feishu app.

Install only if you want an assistant to help submit real Feishu leave requests. Confirm the dates, duration, type, and reason carefully, and use it while signed into the correct Feishu workplace account.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The description is broad enough to trigger on ordinary conversation about taking time off, which can cause the agent to invoke browser automation in contexts where the user has not clearly asked to submit a leave request. That increases the chance of unintended workflow execution, unnecessary collection of personal HR information, or accidental submission attempts.

VirusTotal

66/66 vendors flagged this skill as clean.