让飞书可以发图片消息

• Analyzed: May 11, 2026, 5:59 AM
• Findings: 1
• Version: 1.0.0
• Hash: 75290fa00e2a6a97bf9b7e206e80ab631af56d719e99e912a4b8f81150502420
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for sending images to Feishu/Lark via their official APIs. It follows security best practices by using environment variables for credentials (FEISHU_APP_ID/SECRET) and employing 'jq' for safe JSON construction in scripts like send_message.sh. While send_image.sh downloads remote URLs to a temporary file, this is a documented feature and the scripts do not exhibit signs of data exfiltration, command injection, or malicious intent.