Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- scripts/send.js:55
Security audit
单向历
Security checks across malware telemetry and agentic risk
Overview
The skill mostly matches its stated purpose, but its send script builds a shell command from editable configuration values, which creates a command-injection risk.
Review this skill before installing. Its purpose is straightforward, but the current implementation should be hardened before routine or scheduled use because crafted config values could turn the Feishu send command into unintended shell execution.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- scripts/setup.js:60