Security audit
Security checks for vulnerabilities and agentic risk
This documentation-only skill explains how to write content to Feishu/Lark documents; its API and credential use fit that purpose, but users should protect their Feishu app secret.
Install only if you intend to let the agent help write to Feishu/Lark documents. Provide credentials through a secure secret mechanism, verify the target document or folder before writes, and avoid pasting app secrets into chat or committing them to files.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST 'https://open.feishu.cn/open-apis/auth/v3/app_access_token/internal' \
-H 'Content-Type: application/json' \
-d '{ "app_id": "<app_id>", "app_secret": "<app_secret>" }'
This markdown file documents an authentication flow using app_id and app_secret, which are sensitive credentials, but it does not include any caution about secure storage, avoiding accidental exposure, or not hardcoding secrets. Under the markdown criteria for missing user warnings, credential-handling behavior that could affect privacy or system integrity should be accompanied by a warning.
No suspicious patterns detected.