Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent CLI/HITL automation framework, but it normalizes broad browser-session credential reuse, request replay, and persistent background approval infrastructure for arbitrary systems without enough scoping or consent controls.
Review before installing. This skill is not just a HITL guard template; it teaches agents to inspect live web apps, reuse browser/session credentials, parse local token sources, replay request headers, create persistent local CLIs, and run a long-lived Feishu approval daemon. Only use it in environments where those behaviors are explicitly authorized, and require agents to use scoped credentials or documented APIs instead of copying browser cookies, tokens, or full headers.
raise NotApproved(json.dumps({"approved": False,
"reason": f"guard daemon not running and GUARD_DAEMON_SCRIPT unset ({DAEMON_PID})"}))
SPOOL_ROOT.mkdir(parents=True, exist_ok=True)
subprocess.Popen([sys.executable, DAEMON_SCRIPT],
stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
start_new_session=True)
deadline = time.time() + 10raise NotApproved(json.dumps({"approved": False,
"reason": f"guard daemon not running and GUARD_DAEMON_SCRIPT unset ({DAEMON_PID})"}))
SPOOL_ROOT.mkdir(parents=True, exist_ok=True)
subprocess.Popen([sys.executable, DAEMON_SCRIPT],
stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
start_new_session=True)
deadline = time.time() + 10if profile:
argv += ["--profile", profile]
argv += list(args)
proc = subprocess.run(argv, capture_output=True, text=True, timeout=timeout)
if proc.returncode != 0:
raise RuntimeError(f"lark-cli failed: {proc.stderr.strip()[:300]}")
return json.loads(proc.stdout)if profile:
argv += ["--profile", profile]
argv += list(args)
proc = subprocess.run(argv, capture_output=True, text=True, timeout=timeout)
if proc.returncode != 0:
raise RuntimeError(f"lark-cli failed: {proc.stderr.strip()[:300]}")
return json.loads(proc.stdout)No suspicious patterns detected.