Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed document-generation helper that fetches Sensors Analytics manuals and creates Feishu documents, with no hidden code, persistence, or credential handling found.
Install only if you want an agent to retrieve Sensors Analytics manual content and create Feishu documents from it. Before use, confirm the manual URLs are official Sensors Analytics pages and that creating a new Feishu document in your workspace is appropriate.
The manifest description includes broad trigger phrases such as '生成使用说明', '创建手册', and '文档生成', which are generic enough to match many unrelated user requests. This can cause unintended invocation of a skill that fetches external content and creates Feishu documents, increasing the chance of accidental external requests and document generation without clear user intent.
The skill fetches external URLs and then creates a Feishu document from the retrieved content, but the description does not clearly warn users about these side effects. This weakens informed consent and can lead to users unintentionally causing network access or propagation of external/derived content into enterprise documentation systems.
No suspicious patterns detected.
