ClawHub
Back to skill

Security audit

OpenClaw Feishu Channel Rules

Security checks for vulnerabilities and agentic risk

Overview

This skill only applies concise Feishu/Lark formatting guidance and does not add code execution, data access, credentials, persistence, or hidden behavior.

Install this only if you want Feishu/Lark conversations to follow these concise style and Markdown formatting rules by default. The main practical impact is always-on formatting influence, not access to your data or system.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Direct Prompt Extraction

High
Category
System Prompt Leakage
Content
---
name: feishu-channel-rules
description: |
  Lark/Feishu channel output rules. Always active in Lark conversations.
alwaysActive: true
---
Confidence
85% confidence
Finding
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Direct Prompt Extraction

High
Category
System Prompt Leakage
Content
alwaysActive: true
---

# Lark Output Rules

## Writing Style
Confidence
85% confidence
Finding
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Vague Triggers

Medium
Confidence
92% confidence
Finding
The description says the skill is "Always active in Lark conversations" and the manifest sets `alwaysActive: true`, but it does not define any narrower scope, exclusions, or negative examples. This activation condition is overly broad for a manifest file and could make the skill apply in routine conversations where the user did not intend these rules to be enforced.

Natural-Language Policy Violations

Low
Confidence
88% confidence
Finding
The entire reference is written in Chinese and presents itself as the authoritative syntax guide, with no indication that other languages are supported or that the user can opt into a preferred locale. This can violate a language/locale policy when skills are expected to avoid forcing a specific language unless clearly documented and justified.

Static analysis

No suspicious patterns detected.