Feishu Messaging.Bak2

• Analyzed: Mar 21, 2026, 4:16 PM
• Findings: 1
• Version: 1.0.0
• Hash: 078865dcfdd2970e64f65f01c4c9149f972bdf8caffee477cdff1bec1f4293ae
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains multiple scripts (scripts/search-user.js, scripts/test-feishu.js, and scripts/test-send-message.js) with hardcoded Feishu API credentials (APP_ID and APP_SECRET). While the scripts' logic appears aligned with the stated purpose of managing Feishu messages and users, the inclusion of active credentials is a significant security vulnerability that allows unauthorized access to the associated Feishu application. No clear evidence of intentional data exfiltration to third-party domains was found, as all network requests are directed to the official open.feishu.cn endpoint.