ClawHub
Back to skill

Security audit

Feishu Bitable Import

Security checks for vulnerabilities and agentic risk

Overview

This looks like a legitimate Feishu import tool, but it can delete or overwrite business table data without strong safety checks.

Install only if you are comfortable granting this skill write access to Feishu Bitable data. Use a dedicated least-privilege Feishu app, keep the .env file out of source control, verify app_token and table_id carefully, back up important tables, and avoid --mode full unless you intentionally want to replace every existing record in that table.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly offers a '全量覆盖' mode that clears old data and reimports everything, but it does not prominently warn that this is destructive and can permanently remove existing records if the input is incomplete, incorrect, or the wrong table is targeted. In an automation/import skill, this omission increases the likelihood of accidental data loss during normal use.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill instructs users to store FEISHU_APP_ID and FEISHU_APP_SECRET in a .env file but provides no guidance on secret handling, such as excluding the file from version control, setting least-privilege permissions, or using a dedicated secret manager. This can lead to credential leakage through source control, shared workspaces, logs, or accidental disclosure, enabling unauthorized access to Feishu APIs.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
This script reads local CSV/Excel/JSON files and uploads their contents to Feishu via API calls, but it does not present any explicit warning, confirmation, or data-destination notice to the user at the point of transmission. In a skill/agent context, this can lead to unintentional exfiltration of sensitive local data to an external SaaS service, especially if users treat the tool as a local-formatting utility rather than a network uploader.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
In full-sync mode, the script deletes all existing records in the target table before recreating data, with no dry-run, confirmation prompt, backup, or scope validation. If the operator supplies the wrong app_token/table_id or stale input data, this can cause immediate large-scale irreversible data loss in a production table.

Static analysis

No suspicious patterns detected.