Feishu Api Cache Fix

• Outcome: Review
• Latest audit: May 28, 2026 at 11:31 AM UTC
• Version:
  1.0.1

Overview

This skill is a high-impact local patch that asks for sudo and rewrites OpenClaw's Feishu probe to always report success, not just cache the real API check.

Review before installing. Only run this in a disposable or backed-up OpenClaw environment if you explicitly accept that Feishu health and credential probing may always appear successful; prefer an official fix or a patch that caches the real probe result and preserves failure states.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Intent-Code Divergence

High

• Confidence: 99% confidence
• Finding: The script claims to fix Feishu API caching, but it actually overwrites a production TypeScript source file with a stubbed implementation that always returns `{ ok: true }` and never performs a real probe. This bypasses authentication or health validation logic and can cause the system to trust invalid or missing credentials, making downstream integrations operate under false assumptions.

Intent-Code Divergence

Medium

• Confidence: 94% confidence
• Finding: The completion message presents the change as a harmless cache repair, but the script has silently replaced core logic with a success-only stub. This deception increases the likelihood that an operator will deploy the modification without realizing security checks have been disabled.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill instructs users to execute a shell script with sudo, which grants the script full root privileges, but provides no explanation of what privileged changes will occur or what files/services will be modified. In a skill context, this is dangerous because users may run an unreviewed script from a third party, turning documentation into a social-engineering path for privilege abuse or destructive system changes.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The script directly overwrites a system-managed file under `/usr/local/lib/node_modules` after making only a backup, without validation, prompting, or rollback safety. In this context, the overwrite is especially dangerous because it modifies security-relevant runtime behavior rather than a harmless cache setting.

VirusTotal

66/66 vendors flagged this skill as clean.