Security audit

schedule-feishu

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Feishu schedule helper, but users should understand it stores Feishu document metadata locally and automatically deletes old schedule entries.

Install only if you are comfortable granting Feishu document read/write and reminder-message access for this schedule workflow. Check the retention setting before use because old schedule entries are deleted automatically, and avoid sharing or committing config.json after it contains your Feishu document URL/token and chat identifier.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:26
Finding: Plaintext Storage of Feishu Document Access Metadata and User Identifier
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The manifest description and all user-facing instructions/messages in SKILL.md are written exclusively in Chinese, including fixed confirmation and reminder message examples. There is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context, which can violate language/locale policy requirements.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill advertises automatic cleanup of historical schedule data but does not present this destructive behavior as a prominent warning or require clear opt-in acknowledgment. Because schedules may contain important records, silent deletion can cause loss of user data and undermine availability and auditability, especially when the retention window defaults to only seven days.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill states it will automatically extract the user's Feishu chat ID from message context and persist it to config.json without clear, prominent consent or notice at the point of collection. Persisting an identifier tied to a user account increases privacy risk and can enable unintended tracking, correlation, or misuse if the config file is exposed or reused across contexts.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.