Feishu Message Reader

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.0

Overview

This skill does what it says: it uses Feishu credentials to fetch a specific message and optional thread context, with no evidence of hidden persistence or unrelated data access.

Install only if you want the agent to read Feishu messages accessible to your configured Feishu app or tenant token. Keep Feishu credentials least-privileged, avoid passing tokens on the command line when possible, and use --thread only when additional conversation context is needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill invokes a Python script that uses network access to call the Feishu IM API and reads secrets from environment variables or a local config file, but the manifest does not declare corresponding permissions. This creates a transparency and governance gap: operators may enable the skill without understanding that it can access credentials and make outbound requests, which can lead to unintended data exposure or policy violations.

VirusTotal

66/66 vendors flagged this skill as clean.