飞书群学习分析

• Analyzed: May 11, 2026, 6:31 AM
• Findings: 1
• Version: 1.0.0
• Hash: 94d2aac0c7eb401a53a4296309615b3601374dc11a4b793a5b80c24cf257793f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill contains hardcoded sensitive credentials (app_id and app_secret) and specific target Chat IDs in both `analyze.sh` and `group_learning.py`. While the logic performs the stated task of Feishu message analysis, hardcoding secrets is a critical security vulnerability, and the use of specific, pre-defined chat IDs (e.g., '养虾乐园') suggests the code is not generalized for safe public use. No evidence of intentional data exfiltration to a third party was found, but the credential exposure is high-risk.