Security audit
Security checks for vulnerabilities and agentic risk
This Feishu Drive skill is a small, clearly scoped cloud-file management helper, with delete capability disclosed but worth using carefully.
Install only if you want an agent to manage Feishu Drive content. Use least-privilege Feishu permissions where possible, and confirm move or delete requests carefully because cloud-file deletion may affect shared or business data.
The skill exposes destructive delete capabilities but does not warn that deletion is irreversible or should be confirmed before execution. In an agent setting, this increases the chance of accidental or socially engineered data loss because users may invoke deletion without understanding the consequences.
The natural-language examples are exclusively in Chinese, while the rest of the skill description is in English, which can imply a language-specific interaction expectation without user opt-in or justification. The file does not state that the skill is region-specific or that users may interact in their preferred language.
No suspicious patterns detected.
