Feishu Voice

This skill appears coherent and implements exactly what it claims: generate TTS via coze-tts, convert/measure audio, upload to Feishu, and send an audio message. Before installing or running it: 1) Verify and trust the coze-tts script that this skill will execute (it searches common workspace paths and will run whatever it finds there). Inspect that script and the workspace paths to ensure they are not malicious. 2) Provide only a Feishu app with the minimal permissions needed (im:message, send_as_bot) and avoid using high-privilege tenant credentials unnecessarily. 3) Keep COZE_API_KEY and FEISHU_* secrets in a secure place; consider testing in an isolated account/workspace first. 4) Note minor metadata/version inconsistencies across files (package.json/_meta.json/registry), which is a quality issue but not a direct security problem. If you cannot inspect the coze-tts implementation or workspace paths, treat that as a risk because arbitrary code in those scripts could run with your environment credentials.