Feishu ClawBot Card

• Outcome: Review
• Latest audit: May 28, 2026, 12:48 PM
• Version:
  1.0.4

Overview

This skill mostly does what it says, but its rendered share card can produce an unsafe shell command from card data someone else supplied.

Install only if you are comfortable storing Feishu identity-card data locally. Do not run rendered import commands from cards you did not create or fully inspect; import reviewed raw JSON instead, and share cards only with trusted recipients.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: This script performs an irreversible delete operation immediately after receiving an ID from the command line, with no confirmation prompt, dry-run mode, or secondary safeguard. In a CLI/admin context, this increases the risk of accidental or scripted deletion of the wrong bot, especially if IDs are mistyped or supplied from automation.

VirusTotal

66/66 vendors flagged this skill as clean.