Security audit
Feishu calendar sync, local ics to json data for AI agent
Security checks for vulnerabilities and agentic risk
Overview
This is a local calendar-file converter that reads selected ICS files and writes JSON, with no evidence of hidden network access, credential use, or destructive behavior.
Install dependencies from trusted sources, run the tool only on a narrow calendar folder you intend to process, and review generated JSON before sharing or importing it because it may contain private calendar information.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.