Security audit

lark-base

Security checks for vulnerabilities and agentic risk

Overview

The skill is a documented Lark Base automation guide with no hidden code, but it can operate on live Base data, roles, and workflows through lark-cli.

Install only if you intend to let the agent help manage Lark Base resources through your authenticated lark-cli. Review commands that update/delete records, change roles or advanced permissions, enable workflows, upload/download attachments, or send Base data to external HTTP endpoints; use approved endpoints and avoid unnecessary personal or business-sensitive fields.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (91)

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 75% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · references/dashboard-block-data-config.md (reported line 175)May include surrounding context.
md
- 规范化（CLI 自动处理） - `series[].rollup` 自动转成大写（如 `sum` → `SUM`） - `group_by[].sort.type/order` 自动转成小写 - 本地校验（可通过 `--no-validate` 跳过） - `+dashboard-block-create` 默认对 `data_config` 做轻量校验；失败会聚合错误并给出修复建议 - `+dashboard-block-update` 不做强类型校验，由后端验证具体字段 - 仅需传入合法 JSON；CLI 不会擅自改写你的业务含义

Context-Inappropriate Capability

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The guide explicitly provides a pattern for sending Base record fields, including lead name, mobile number, company, and owner, to an arbitrary external endpoint via HTTPClientAction. In a skill centered on Base operations, this materially enables data exfiltration or uncontrolled third-party transfer of potentially sensitive customer data if an agent or user follows the example without strict allowlisting and consent controls.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The manifest description is written entirely in Chinese and frames when the skill should be used in Chinese-only terms, with no indication that other languages are supported or that the user can choose a locale. Under the policy scope for natural-language violations, this can be read as a language constraint without explicit opt-in or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file's instructional content is written entirely in Chinese and presents itself as the authoritative source for using the skill, but it does not offer an alternative language or note that Chinese is required for a region-specific or compliance reason. Under the policy, a forced language or locale without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 72)May include surrounding context.
md
### Implicit type conversion | Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 317)May include surrounding context.
md
### Implicit type conversion | Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 324)May include surrounding context.
md
### Implicit type conversion | Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 328)May include surrounding context.
md
### Implicit type conversion | Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 329)May include surrounding context.
md
### Implicit type conversion | Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 74)May include surrounding context.
md
| Scenario | Conversion rule | | ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision | | Date - Date | → Duration | | Boolean compared with Number | Boolean auto-converts to number (TRUE=1, FALSE=0) |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 76)May include surrounding context.
md
| ---------------------------- | ----------------------------------------------------------------------------------------------------------- | | Number + Float | → Float | | Date + Number | → Date (adds/subtracts days). Use `+`/`-` for whole days, use `DURATION()` for hour/minute/second precision | | Date - Date | → Duration | | Boolean compared with Number | Boolean auto-converts to number (TRUE=1, FALSE=0) | | `&` concatenation | Both sides auto-convert to string |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 235)May include surrounding context.
md
### 8.1 Logic functions | Function | Signature | Return type | Description | | ------------- | ------------------------------------------------------------------ | -------------------- | -------------------------------------------------------------------------------------------- | | IF | `IF(condition, true_val, [false_val])` | Matches branch type | Returns true_val when TRUE, false_val otherwise; omitting false_val returns false (not null) | | IFS | `IFS(cond1, val1, cond2, val2, ...)` | Matches branch type | Multi-condition branching; returns value for the first TRUE condition |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 304)May include surrounding context.
md
### 8.1 Logic functions | Function | Signature | Return type | Description | | ------------- | ------------------------------------------------------------------ | -------------------- | -------------------------------------------------------------------------------------------- | | IF | `IF(condition, true_val, [false_val])` | Matches branch type | Returns true_val when TRUE, false_val otherwise; omitting false_val returns false (not null) | | IFS | `IFS(cond1, val1, cond2, val2, ...)` | Matches branch type | Multi-condition branching; returns value for the first TRUE condition |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 306)May include surrounding context.
md
### 8.1 Logic functions | Function | Signature | Return type | Description | | ------------- | ------------------------------------------------------------------ | -------------------- | -------------------------------------------------------------------------------------------- | | IF | `IF(condition, true_val, [false_val])` | Matches branch type | Returns true_val when TRUE, false_val otherwise; omitting false_val returns false (not null) | | IFS | `IFS(cond1, val1, cond2, val2, ...)` | Matches branch type | Multi-condition branching; returns value for the first TRUE condition |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 252)May include surrounding context.
md
| CONTAIN | `CONTAIN(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains the value; **does NOT do text substring matching** | | CONTAINSALL | `CONTAINSALL(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains all specified values | | CONTAINSONLY | `CONTAINSONLY(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains only the specified values | | TRUE | `TRUE()` | Boolean | Returns TRUE | | FALSE | `FALSE()` | Boolean | Returns FALSE | | RECORD_ID | `RECORD_ID()` | Text | Returns the current row's record ID | | RANDOMBETWEEN | `RANDOMBETWEEN(min_int, max_int, [keep_updating])` | Number | Random integer in the specified range |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 320)May include surrounding context.
md
| CONTAIN | `CONTAIN(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains the value; **does NOT do text substring matching** | | CONTAINSALL | `CONTAINSALL(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains all specified values | | CONTAINSONLY | `CONTAINSONLY(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains only the specified values | | TRUE | `TRUE()` | Boolean | Returns TRUE | | FALSE | `FALSE()` | Boolean | Returns FALSE | | RECORD_ID | `RECORD_ID()` | Text | Returns the current row's record ID | | RANDOMBETWEEN | `RANDOMBETWEEN(min_int, max_int, [keep_updating])` | Number | Random integer in the specified range |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 253)May include surrounding context.
md
| CONTAINSALL | `CONTAINSALL(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains all specified values | | CONTAINSONLY | `CONTAINSONLY(search_range, value, ...)` | Boolean | Tests if a list or `select` (`multiple=true`) contains only the specified values | | TRUE | `TRUE()` | Boolean | Returns TRUE | | FALSE | `FALSE()` | Boolean | Returns FALSE | | RECORD_ID | `RECORD_ID()` | Text | Returns the current row's record ID | | RANDOMBETWEEN | `RANDOMBETWEEN(min_int, max_int, [keep_updating])` | Number | Random integer in the specified range | | RANDOMITEM | `RANDOMITEM(list, [keep_updating])` | Matches element type | Randomly picks one element from a list |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 260)May include surrounding context.
md
### 8.2 Numeric functions | Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 284)May include surrounding context.
md
### 8.2 Numeric functions | Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 262)May include surrounding context.
md
| Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum |

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 263)May include surrounding context.
md
| Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum | | MEDIAN | `MED ...[truncated 25 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 264)May include surrounding context.
md
| Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum | | MEDIAN | `MED ...[truncated 25 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 265)May include surrounding context.
md
| Function | Signature | Return type | Description | | --- | --- | --- | --- | | SUM | `SUM(val1, val2, ...)` | Number | Sum; accepts multiple values or a list | | AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum | | MEDIAN | `MED ...[truncated 25 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 266)May include surrounding context.
md
| AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum | | MEDIAN | `MEDIAN(val1, val2, ...)` | Number | Median | | COUNTA | `COUNTA(val1, val2, ...)` | Number | Count of non-blank values | | COUNTIF | `COUNTIF(data_range, condition ...[truncated 25 chars]

Whitespace Padding

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Content: Scanner excerpt · references/formula-field-guide.md (reported line 277)May include surrounding context.
md
| AVERAGE | `AVERAGE(val1, val2, ...)` | Number | Average | | MAX | `MAX(val1, val2, ...)` | Number | Maximum | | MIN | `MIN(val1, val2, ...)` | Number | Minimum | | MEDIAN | `MEDIAN(val1, val2, ...)` | Number | Median | | COUNTA | `COUNTA(val1, val2, ...)` | Number | Count of non-blank values | | COUNTIF | `COUNTIF(data_range, condition ...[truncated 25 chars]

Static analysis

No suspicious patterns detected.