Feishu Bitable Tasker

• Outcome: Review
• Latest audit: Sep 14, 2026 · 10:32 PM UTC
• Version: 0.1.0

Overview

The skill is mostly consistent with Feishu task management, but its setup and validation can create lasting Feishu records/documents and store app secrets locally in ways users may not expect.

Install only with a Feishu app limited to a dedicated Bitable/wiki area. Treat config/credentials.json as a secret, restrict its permissions, and avoid committing it. Do not run the validation command against production resources unless you accept that it will create test records/documents that must be cleaned up manually. Prefer installing from a pinned, reviewed revision rather than the mutable npx command shown in the README.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (3)

T08 · Insecure Dependencies

Error

• Location: README.md:24

Finding

Unpinned External Installer and Repository Reference

Content

View full analysis

Remediation

View remediation

add ... ``` 2. Pin the Skill source to an immutable commit hash or cryptographically signed release rather than a mutable repository branch. 3. Publish SHA-256 checksums or signed provenance for release artifacts. 4. Document how users can verify the downloaded artifact before installation. 5. Prefer installing from a locally downloaded and reviewed artifact where practical. 6. Use npm lockfiles and integrity metadata for any future dependencies. 7. Run installation with the minimum necessary operating-system privileges. ]]>

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/admin.js:580

Finding

Feishu Application Secret Stored Without Explicit Filesystem Protection

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/validate.js:129

Finding

Validation Command Creates Persistent Records and Wiki Documents

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (49)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

The skill advertises routine task management, but its documented behavior also includes administrative actions such as provisioning data structures, creating document roots, checking permissions, and writing local configuration files. This mismatch is security-relevant because a caller may grant or approve the skill expecting limited task operations while it can also modify remote Feishu resources and local state beyond that stated purpose.

Content

No source excerpt is available for this finding.

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · FAQ.md (reported line 39)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · FAQ.md (reported line 65)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · README.md (reported line 125)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · README.md (reported line 144)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 45)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 55)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 67)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 76)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 84)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 90)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 97)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 100)May include surrounding context.

1. 检查配置

bash

cd <SKILL_DIR> && ls config/credentials.json config/.configured

• 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 593)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 595)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 703)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 706)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 710)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 714)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/admin.js (reported line 718)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/task-manager.js (reported line 234)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/task-manager.js (reported line 300)May include surrounding context.

js

### 1. 检查配置

```bash
cd <SKILL_DIR> && ls config/credentials.json config/.configured
```

- 两个文件都存在 → 跳到「可用命令」

Static analysis

No suspicious patterns detected.